search for: setntdom

...because this is for the group ?DOMAIN ADMINS? # and Dom Admin are allowed everything. ( optional change NTDOM\Domain Admins, to BUILDIN\Administrators ) # both work good, i preffer like below.   # change the 2 variables below to match your setup. YOUR_NTPASSWD=?YOUR_Administrator_PASSWD? SETNTDOM=?NTDOM? echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain Admins" SeDiskOperatorPrivilege -UAdministrator echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain Admins" SeTakeOwnershipPrivilege -UAdministrator echo ${SETNTPASSWD}| net rpc rights grant &quo...

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: woensdag 24 mei 2017 12:38 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] classic upgrade, splitting servers > > Am 2017-05-24 um 12:23 schrieb L.P.H. van Belle via samba: > > Ok, lets start with : > >>

Dear colleagues and samba-experts, I installed a samba-file-server as a samba domain-member using debian jessie-packages, following the samba-manual "Setting up Samba as a Domain Member". I can access the shares and create files but there are issues concerning security. As proposed I am using RSAT (on a german Windows 10 Pro, logged in as Domain Administrator) to set details

...n Admins, this is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland > Links: ------ [1] http://www.donelsontrophy.com [1] OK, I have had a look at Louis's script and the line that is failing is this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}\"Domain Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is here ^ If you want to escape a character in bash you use the '' character and I 'think' what is happening is that, instead of escaping the other '' it is actually escaping...

...Admins, this is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland Links: ------ [1] http://www.donelsontrophy.com [1] [1 [1]] OK, I have had a look at Louis's script and the line that is failing is this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}"Domain Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is here ^ If you want to escape a character in bash you use the '' character and I 'think' what is happening is that, instead of escaping the other '' it is actually escaping the...

...this is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland Links: ------ [1] http://www.donelsontrophy.com [1] [1 [1]] [1 [1]] OK, I have had a look at Louis's script and the line that is failing is this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}"Domain Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is here ^ If you want to escape a character in bash you use the '' character and I 'think' what is happening is that, instead of escaping the other '' it is actually escaping the...

...by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland >> Links: ------ [1] http://www.donelsontrophy.com [1] > OK, I have had a look at Louis's script and the line that is failing is > this: > > echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}\"Domain Admins" > SeDiskOperatorPrivilege -UAdministrator > > I 'think' the problem is here ^ > > If you want to escape a character in bash you use the '' character and I > 'think' what is happening is that, instead of escaping the other '&...

Hi, Me again, still trying to migrate my samba3-server. Using the script op L.P.H. van Belle, there is one failure : net rpc rights grant ${SETNTDOM}\\"Domain Admins" SeDiskOperatorPrivilege -U${SETNTUSER} This is the result : ==========SE Privileges =============================== Giving group Domain Admins the SeDiskOperatorPrivilege rights. Enter Admikoen's password: Could not connect to server 127.0.0.1 Connection failed: NT...

...s is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland Links: ------ [1] http://www.donelsontrophy.com [1] [1 [1]] > OK, I have had a look at Louis's script and the line that is failing is > this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}"Domain > Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is > here ^ If you want to escape a character in bash you use the '' > character and I 'think' what is happening is that, instead of escaping > the other '' it is ac...

...IPDC1} EOF Now, if you use both 'search' & 'domain' in resolv.conf, which ever is second wins, as they are mutually exclusive (see 'man resolv.conf) Remove the domain line Have you tried running the line that failed manually ? echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}\\"Domain Admins" SeDiskOperatorPrivilege -UAdministrator Rowland

Thanks Rowland. Being the novice that I am, I thought the line would 'pickup' my DOMAIN and replace the ${SAMBA_NT_DOMAIN}. So, I just tried the line correctly and it asked for my Administrator password and subsequently granted access. At least I know I can go and correct manually, if I need too. My /etc/resolv.conf is: root at dt01:~# cat /etc/resolv.conf search dts***m.dt

...n, run 'wbinfo -g' this should print all your domain groups. >> >> Rowland > > > Links: > ------ > [1] http://www.donelsontrophy.com OK, I have had a look at Louis's script and the line that is failing is this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}\\"Domain Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is here ^ If you want to escape a character in bash you use the '\' character and I 'think' what is happening is that, instead...

...#39; in resolv.conf, >which ever is second wins, as they are mutually exclusive (see >'man resolv.conf) >> >> Remove the domain line >> >> Have you tried running the line that failed manually ? >> >> echo ${SETNTPASSWD}| net rpc rights grant >${SETNTDOM}\"Domain Admins" SeDiskOperatorPrivilege -UAdministrator >> >> Rowland > > >Links: >------ >[1] http://www.donelsontrophy.com >-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/opti...

You can try to bind the interfaces including localhost. That worked for me. Am 25. Februar 2015 21:20:05 MEZ, schrieb Marc Muehlfeld <mmuehlfeld at samba.org>: >Hello Bob, > >Am 25.02.2015 um 19:09 schrieb Bob of Donelson Trophy: >> I ran your "1-setup-sernet-samba4-ADDC-wheezy.sh" script and noticed >> this (during install:) >> >> ==========SE

It's definitely a problem with backend ad. I don't know what, but with ad backend I also cannot list rpc rights on the server because it cannot find the user. With rid: no problem. Bug? Am 9. Januar 2015 17:56:59 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 16:48, Tim wrote: >> Definitely. >> >> With backend=ad only two user can be