search for: setntpasswd

...oup ?DOMAIN ADMINS? # and Dom Admin are allowed everything. ( optional change NTDOM\Domain Admins, to BUILDIN\Administrators ) # both work good, i preffer like below.   # change the 2 variables below to match your setup. YOUR_NTPASSWD=?YOUR_Administrator_PASSWD? SETNTDOM=?NTDOM? echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain Admins" SeDiskOperatorPrivilege -UAdministrator echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain Admins" SeTakeOwnershipPrivilege -UAdministrator echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain Admins&q...

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: woensdag 24 mei 2017 12:38 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] classic upgrade, splitting servers > > Am 2017-05-24 um 12:23 schrieb L.P.H. van Belle via samba: > > Ok, lets start with : > >>

Dear colleagues and samba-experts, I installed a samba-file-server as a samba domain-member using debian jessie-packages, following the samba-manual "Setting up Samba as a Domain Member". I can access the shares and create files but there are issues concerning security. As proposed I am using RSAT (on a german Windows 10 Pro, logged in as Domain Administrator) to set details

.... The script doesn't create Domain Admins, this is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland > Links: ------ [1] http://www.donelsontrophy.com [1] OK, I have had a look at Louis's script and the line that is failing is this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}\"Domain Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is here ^ If you want to escape a character in bash you use the '' character and I 'think' what is happening is that, instead of escaping the other &...

...The script doesn't create Domain Admins, this is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland Links: ------ [1] http://www.donelsontrophy.com [1] [1 [1]] OK, I have had a look at Louis's script and the line that is failing is this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}"Domain Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is here ^ If you want to escape a character in bash you use the '' character and I 'think' what is happening is that, instead of escaping the other '...

...ipt doesn't create Domain Admins, this is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland Links: ------ [1] http://www.donelsontrophy.com [1] [1 [1]] [1 [1]] OK, I have had a look at Louis's script and the line that is failing is this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}"Domain Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is here ^ If you want to escape a character in bash you use the '' character and I 'think' what is happening is that, instead of escaping the other '...

...;t create Domain Admins, this is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland >> Links: ------ [1] http://www.donelsontrophy.com [1] > OK, I have had a look at Louis's script and the line that is failing is > this: > > echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}\"Domain Admins" > SeDiskOperatorPrivilege -UAdministrator > > I 'think' the problem is here ^ > > If you want to escape a character in bash you use the '' character and I > 'think' what is happening is that, in...

...doesn't create Domain Admins, this is done by the provision, run 'wbinfo -g' this should print all your domain groups. Rowland Links: ------ [1] http://www.donelsontrophy.com [1] [1 [1]] > OK, I have had a look at Louis's script and the line that is failing is > this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}"Domain > Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is > here ^ If you want to escape a character in bash you use the '' > character and I 'think' what is happening is that, instead of escaping...

...main ${SETDNSDOMAIN} nameserver ${SETIPDC1} EOF Now, if you use both 'search' & 'domain' in resolv.conf, which ever is second wins, as they are mutually exclusive (see 'man resolv.conf) Remove the domain line Have you tried running the line that failed manually ? echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}\\"Domain Admins" SeDiskOperatorPrivilege -UAdministrator Rowland

Thanks Rowland. Being the novice that I am, I thought the line would 'pickup' my DOMAIN and replace the ${SAMBA_NT_DOMAIN}. So, I just tried the line correctly and it asked for my Administrator password and subsequently granted access. At least I know I can go and correct manually, if I need too. My /etc/resolv.conf is: root at dt01:~# cat /etc/resolv.conf search dts***m.dt

...Admins, this is done by the provision, run 'wbinfo -g' this should print all your domain groups. >> >> Rowland > > > Links: > ------ > [1] http://www.donelsontrophy.com OK, I have had a look at Louis's script and the line that is failing is this: echo ${SETNTPASSWD}| net rpc rights grant ${SETNTDOM}\\"Domain Admins" SeDiskOperatorPrivilege -UAdministrator I 'think' the problem is here ^ If you want to escape a character in bash you use the '\' character and I 'think' w...

...e both 'search' & 'domain' in resolv.conf, >which ever is second wins, as they are mutually exclusive (see >'man resolv.conf) >> >> Remove the domain line >> >> Have you tried running the line that failed manually ? >> >> echo ${SETNTPASSWD}| net rpc rights grant >${SETNTDOM}\"Domain Admins" SeDiskOperatorPrivilege -UAdministrator >> >> Rowland > > >Links: >------ >[1] http://www.donelsontrophy.com >-- >To unsubscribe from this list go to the following URL and read the >instructions...

You can try to bind the interfaces including localhost. That worked for me. Am 25. Februar 2015 21:20:05 MEZ, schrieb Marc Muehlfeld <mmuehlfeld at samba.org>: >Hello Bob, > >Am 25.02.2015 um 19:09 schrieb Bob of Donelson Trophy: >> I ran your "1-setup-sernet-samba4-ADDC-wheezy.sh" script and noticed >> this (during install:) >> >> ==========SE