similar to: windows server 2008 group policy management

Hi, I've installed RSAT on Windows 8.1 and am trying to set up group policies on my recently installed (from source) samba server. When I run the Group Policy Management tool I get a dialog coming up that says "A processing error occurred collecting data using this base domain controller. Please change the base domain controller and try again." Does anyone else experience this

hi all got a windows 2008 server using samba as a primary domain controller. also got terminal services on the windows box for remote desktops, got some clients set up with thinstation to automatically connect to the terminal server with rdesktop. got a problem with logging on and off, its taking about 2 minutes to log in, "please wait for the user profile service", time increases if

Hey all, according to the whitepaper http://technet.microsoft.com/en-us/library/cc736591%28v=ws.10%29.aspx I would like to a windows shortcut on the desktop that allows me to open and run the "Group Policy Editor" *for my samba4/AD domain*. The shortcut command should be: "gpedit.msc /gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=mydom,

Hai, No, your output is not good. >C:\Temp>netdom verify cyb64w10-monster >The format of the specified computer name is invalid. Thats not good. > C:\Temp>nslookup cyb64w10-monster > Server: UnKnown > Address: fdea:5b48:d4c1:1:1::6 Also not good. If you resolving is setup correct both should work. netdom verify cyb64w10-monster and netdom verify

On 10/03/2023 15:58, David Mulder via samba wrote: > > On 3/10/23 8:56 AM, Rowland Penny via samba wrote: >> >> >> On 10/03/2023 15:46, David Mulder via samba wrote: >>> On 3/10/23 8:35 AM, Dennis Binkhorst via samba wrote: >>>> I have been testing a Debian 11 (i386) server with samba >>>> 2:4.13.13+dfsg-1~deb11u5 running as an Active

Hai, Why would you ever add Domain users to Local Admins? Thas really a very big NO NO, dont do that, really.. Dont.. If you want to be an victum of online crime, that thats the way to allow it to happen. Now your GPO. Its a new setup, correct? If so. Login on the AD and kinit Administrator Run : samba-tool ntacl sysvolreset -k Now, goto the Default Domain policy, is

Hai, the steps are (basily) good, only this one can be better.   >To solve, I executed the following commands: >Chown 10060: 30028 -R sysvol >Chmod 775 -R sysvol   If you use acl_xattr:ignore system acls = yes on the sysvol share, you must configur the share from withing windows.  (* or use smbcalcs , but i never used it. )   This is what i see:   ls -al  sysvol total 24 drwxrwx---+ 3

>I'm re-reading... do you mean you don't see those >policies when using >*MS* RSAT against a Samba ADDC, but you do >against a Windows ADDC? I am trying to all Samba AD DC admin tasks from Windows machines, using the RSAT features provided in Windows 11 Pro and Windows 10 Pro. What I meant to say was: I do not see *Account Policies* and *Local Policies* under *"Computer

> Hi , > > > Need to see if it is possible to do > > * Restrict local Storage use - Means how to restrict via group policy > so that logon user in Samba AD will not be able to save any files on > local storage of C: of D: drives . He can save on mapped Drive ( > From Samba File Server ) . > * Restrict web Access via any Browser via Group Policy

I have been testing a Debian 11 (i386) server with samba 2:4.13.13+dfsg-1~deb11u5 running as an Active Directory Controller. This is a stand-alone DC, meant for user authentication for a small business network. I use RSAT Features on Windows 11 Pro to manage Users, Groups, Machines etc., which works fine. I would like create a new GPO using the RSAT Group Policy Manager to change Security

On 3/10/23 8:56 AM, Rowland Penny via samba wrote: > > > On 10/03/2023 15:46, David Mulder via samba wrote: >> On 3/10/23 8:35 AM, Dennis Binkhorst via samba wrote: >>> I have been testing a Debian 11 (i386) server with samba >>> 2:4.13.13+dfsg-1~deb11u5 running as an Active Directory Controller. >>> This is >>> a stand-alone DC, meant for user

Hi everyone, I have encountered an interesting error when using group policy management to manage our Samba 4 AD DCs. The error is: "A processing error occurred collecting data using this base domain controller. Please change the base domain controller and try again." This error was encountered after I experimented with transferring FSMO roles between the domain controllers. I

Hi there, I'm having an issue with vbscript in wine. It relates to a problem with the cardbox database client which you can see here: http://www.cardbox.com/wine.htm I get the Cardbox error message and pressing OK will return me to the Cardbox window, indicating vbscript is not installed. First I just ran the installer which I found here:

On 12/06/15 15:54, L.P.H. van Belle wrote: > Ok, so if i understand right, > your sysvol is on a shared folder which is a debian squeeze server. > i think you problem is that the needed acl cant be set on the queeze server. You are probably right Louis. > > and why not systemd, since gentoo also does systemd > https://wiki.gentoo.org/wiki/Systemd Ah but Gentoo only does

Hai, > > Hi Louis, I think you missed this: current configuration > (Samba, NT mode) > > But I think you are on the right lines, using the same drive letters > for both sites is asking for trouble. No, thats ok and should work, since i do that also but in AD dom, and you may not use persistant drives and you disconnect them at logoff. > > However the bigger

Hi Achim, Thanks a lot for your reply. > I remember this error. In my case the pc tried to connect to the gpo > share not via the server name but via the domain name. In your case > ad.cyberdyne.local. Well, I am even able to browser the policies via the domain name: \\ad.cyberdyne.local\sysvol\ad.cyberdyne.local\Policies Or via hostname:

On 17/02/2020 16:46, kaffeesurrogat wrote: > >>> Dear Rowland, >>> >>> a typo of mine. some default policies not same default domain policies >>> .... >>> >>> Shouldn't there be some default domain policies >>> after provisioning ? >>> >>> There is not a single default domain policy. >>> >>>

Hi: When I add a user xUser to the Group Policy Creator Owner, xUser should be able to create a new GPO , right? However when I run: samba-tool gpo create new_gpo -U xUser , it throw an exception about insufficient ldap permissions. Then when I access via smb to the folder: domain/sysvol/Policies and the user xUser has permissions for creating folders, I mean, it has no ldap permissions. Any

On Fri, 7 Jul 2017 05:29:30 +0530 Anantha Raghava via samba <samba at lists.samba.org> wrote: > Hello Marc, > > > Hi Anantha, > > > > Am 06.07.2017 um 10:02 schrieb Anantha Raghava via samba: > >> Is there any way we can rebuild corrupt Default Domain Policy and > >> Default Domain Controller Policy. > > What is broken? > Entire Default

Hi , Need to see if it is possible to do * Restrict local Storage use - Means how to restrict via group policy so that logon user in Samba AD will not be able to save any files on local storage of C: of D: drives . He can save on mapped Drive ( From Samba File Server ) . * Restrict web Access via any Browser via Group Policy We have used samba-4.8.3 and windows version is win