search for: rsat

...9; group privileges, but even this >> RPvs> group doesn't get them all AND they only apply to the DC. >> RPvs> You need to create them on each Unix machine. >> RPvs> >> Yeah, I get that too. But since I'm simply doing user/computer >> maintenance in RSAT [in the AD], then Administrator _should_ have the >> correct privs to do what's required, right? >> Obviously, the "Administrator" account won't have any file-system >> privs etc, unless properly granted. But I'm not [at least as far as I >> know] doin...

...vs> inherit all the 'Administrators' group privileges, but even this RPvs> group doesn't get them all AND they only apply to the DC. RPvs> You need to create them on each Unix machine. RPvs> Yeah, I get that too. But since I'm simply doing user/computer maintenance in RSAT [in the AD], then Administrator _should_ have the correct privs to do what's required, right? Obviously, the "Administrator" account won't have any file-system privs etc, unless properly granted. But I'm not [at least as far as I know] doing any changes to the filesystem or f...

I have been testing a Debian 11 (i386) server with samba 2:4.13.13+dfsg-1~deb11u5 running as an Active Directory Controller. This is a stand-alone DC, meant for user authentication for a small business network. I use RSAT Features on Windows 11 Pro to manage Users, Groups, Machines etc., which works fine. I would like create a new GPO using the RSAT Group Policy Manager to change Security Settings for all machines that are in a specific OU. However, when I try to edit the new GPO I am unable to find *Account Polici...

Hi, I would like to provision a huge number of users to a Samba AD/DC and I would like to have the unix attributes set too. I don't want to use the RSAT GUI and manually set each. Is there any tool or script I can use to get that? I have identified some attributes in the AD that are added when I set unix attributes with RSAT GUI. However there must be more changes... These are the attributes: msSFU30Name: msSFU30NisDomain: loginShell: gidNumbe...

...via samba wrote: >>> I have been testing a Debian 11 (i386) server with samba >>> 2:4.13.13+dfsg-1~deb11u5 running as an Active Directory Controller. >>> This is >>> a stand-alone DC, meant for user authentication for a small business >>> network. I use RSAT Features on Windows 11 Pro to manage Users, Groups, >>> Machines etc., which works fine. >>> >>> I would like create a new GPO using the RSAT Group Policy Manager to >>> change >>> Security Settings for all machines that are in a specific OU. >>&...

Good morning all! I have two DCs, both running Samba 4.7.3. I have just joined the second DC to the domain. The second DC is replicating AD objects perfectly, I verified this by running "samba-tool drs showrepl" as well as using the ADUC RSAT snapin and adding a user to one DC, then switching the DC that ADUC connects to and verifying that the user was properly replicated. The DNS objects are alos replicating properly. I checked this by running "samba-dnsupdate" as well as by running nslookup, switching the server to the new...

...>> RPvs> even this group doesn't get them all AND they only apply to > >> RPvs> the DC. You need to create them on each Unix machine. > >> RPvs> > > >> Yeah, I get that too. But since I'm simply doing user/computer > >> maintenance in RSAT [in the AD], then Administrator _should_ have > >> the correct privs to do what's required, right? Your very first post says that RSAT hangs when you try to view the security tab, this is where the NTFS permissions are viewed/changed and to do this, the user must be known to the under...

...ministrators' group privileges, but even this > RPvs> group doesn't get them all AND they only apply to the DC. > RPvs> You need to create them on each Unix machine. > RPvs> > > Yeah, I get that too. But since I'm simply doing user/computer > maintenance in RSAT [in the AD], then Administrator _should_ have the > correct privs to do what's required, right? > > Obviously, the "Administrator" account won't have any file-system > privs etc, unless properly granted. But I'm not [at least as far as I > know] doing any chang...

...e to ignore it in case it is too far off-topic My current understanding is that ... a) I need those new templates in order to fully integrate Win10 clients in an AD domain (i.e. with compatible policies). b) I can only modify policies based on Win10 admx files from Win10 machines (i.e. with the RSAT tools for Win10). Are there any Samba-related implications or issues on doing that, particularly if I follow the MS advice to store those admx files in a central store in the SYSVOL (\PolicyDefinitions) folder? Also, are there any implications for existing domains with e.g. Win7 clients? Is it...

.... it now shows [2017/12/12 10:21:02.936834, 2] ../source4/rpc_server/dcerpc_server.c:1824(dcesrv_request) dcesrv_request: restrict access by min_auth_level[0x4] to [dnsserver] with auth[type=0xa,level=0x2] on [ncacn_ip_tcp] from [ipv4: 172.28.9.100:49994] when I try to open the DNS Management RSAT On Tue, Dec 12, 2017 at 10:04 AM, Taylor Hammerling < thammerling at tcsbasys.com> wrote: > I cranked up the log level to 3 and found this in the log.samba file when > trying to open the DNS Manager RSAT from my client machine (which is joined > to the same domain as the DCs) >...

...; Yes, fully rebooted member server just to be sure. >> > > That should have cleared on local Samba caches, so I wonder if there is > a windows cache involved here. Where would I look for a Windows cache as Samba is both Domain Controller & Member Server? I'll try running RSAT on a different Windows client and see if there is any difference. > > What I do think is, it isn't a good idea to create Samba shares with > spaces in the name, use an underscore instead. > > Rowland

The user is a member of "Domain Admins" so they should be able to access the DNS (as is evident by the fact that they can access the DNS thru RSAT on the initial DC). But just to be thorough I have added "Domain Admins" to the group "DnsAdmins" and tested again, still get the "access denied" error from within windows. On Tue, Dec 12, 2017 at 11:01 AM, lingpanda101 via samba < samba at lists.samba.org> wrot...

...s.samba.org/archive/samba/2013-February/171898.html), and I thoght that I might as well give it a shot. And yes, it all seems to work now. (I even got the rfc2307 uid/gid support working, finally! Doesn't matter a lot on a DC-only box, but still.) Everything, this far, except one thing: if 1. RSAT, specifically one shipped with Windows Vista or newer (older tools do not seem to be affected) is used to manage the domain, 2. Samba 4 DC is the domain controller that RSAT's AD User and Computers console connects to, and 3. one clicks the "Domain Controllers" OU in the tree then th...

...dmin to the listbox but I'm unable to apply. When I click "Ok" or "Apply" the dialog won't close. I tested this on a real Win2008R2 Server and it works here without problems. Any ideas how to get out there? There aare no logs (neiter on Samba-Server nor on the Windows RSAT client). Thanks in advance --

Hi everybody. First a short overview of our setup: We have 2 Samba DCs in Domain 1 We use a Windows 10 Pro VM for the RSAT Tools which we access via RDP We have 1 Windows Server 2012 DC for Domain 2 Between Domain 1 and 2 is a Trust for cross-domain file share access Since the last reboot of our samba DCs they suddenly started to block login attempts on the RSAT-VM and also the Trust to the other domain is broken. Wh...

Hi All, I have live Samba AD DC running. Suddenly it stopped on RSAT. Both AD and DNS not accessible. Please attached screen shots and help me out as it is my live. -- Vivek Patil Assistant Manager - IT Forgeahead Solutions vivek.patil at forgeahead.io *O* +91 (0) 20 66 44 5900 | *M *+91 9579 216 049 601 Zero One, Level 6, Mundhwa, Pune 411036, Maharashtra, In...

Are you using the default ssl certs in samba?. I had a similar issue, and after create my own certificate with all common names used on my domain (for example domain.com, dc1.domain.com and dc2.domain.com), I'm able to manage the dns using RSAT using that named. With ip address still failing. Greetings!! El 12 dic. 2017 6:13 p. m., "Taylor Hammerling via samba" < samba at lists.samba.org> escribió: > The user is a member of "Domain Admins" so they should be able to access > the DNS (as is evident by the...

Am 24.11.2015 um 16:04 schrieb L.P.H. van Belle: > Win8.1 use the RATS tools. > Win 10, no RATS. > > Look here : http://trekker.net/archives/group-policy-downloads/ I think you mean RSAT. What do you mean with "Win 10, no RSAT"? RSAT is available for Win10: https://wiki.samba.org/index.php/Installing_RSAT#Download Regards, Marc

Hi, I have hit a very peculiar problem with DNS. We are using BIND9 as DNS with Samba (Ver 4.7.5). Off late we added a new A record into one of the Zones using RSAT. It is not visible either through RSAT or when we query using samba-tool. We search using RSAT or samba-tool, it results in '0' matches. However, when we attempt make a new entry with same name and IP, it reports an error "Record already exists". But we attempt to delete using...

...ted post. Feel free to ignore >> it in case it is too far off-topic >> >> My current understanding is that ... >> a) I need those new templates in order to fully integrate Win10 >> clients in an AD domain (i.e. with compatible policies). > As long as you have your RSAT installed on a Win10 machine, you > actually don't need to install the templates to the sysvol store. The > purpose of the template store is that multiple admins working from > various machines with different versions of windows can always access > all capabilities. > >&gt...