similar to: Missing Security Group

Hi all, On 21.10.19 17:38, Martin Tessun wrote: > Hi Rowland, > > On 20.10.19 19:16, Rowland penny wrote: >> On 20/10/2019 16:52, Martin Tessun via samba wrote: >>> Hi all, >>> >>> I am having the same issue that is described in an older thread >>> here: https://lists.samba.org/archive/samba/2018-February/213656.html >>> >>>

Greetings. I have provisioned a test AD domain (single DC initially), and joined a single workstation to it. When I use the "Default Domain Policy" that already exist on the newly domain tree, the user level policies are applied perfectly, but machine level policies don't. The "Default Domain Policy" includes "Authenticated Users" read and apply on the

On 02/07/2018 05:01 AM, L.P.H. van Belle via samba wrote: > Hai, > > Ok, for the sysvol. > I'll put all steps here again. > > I suggest start with this one. > wget https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-set-sysvol.sh > This checks and set the rights to be known to be right. ( aka works great for me ) ;-) > Thanks, but before I run that

On 02/06/2018 03:20 PM, lingpanda101 via samba wrote: > On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: >> On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >>> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>>> Hello, >>>>> >>>>> i have a testing

On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: > On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>> Hello, >>> >>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>> Kerberos (clean, not upgraded). I just wan to create/activating a >>> simple GPOs.

On Tue, 6 Feb 2018 15:03:16 -0400 Robert Marcano via samba <samba at lists.samba.org> wrote: > Thanks for the information, to use a default GPO was a simple way to > try to encourage someone to reproduce the problem. > > I already created new GPOs (this is a test domain) Using the default > filter for a new GPO, "Authenticated users", creating a new group for

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

Hi Rowland, On 20.10.19 19:16, Rowland penny wrote: > On 20/10/2019 16:52, Martin Tessun via samba wrote: >> Hi all, >> >> I am having the same issue that is described in an older thread here: >> https://lists.samba.org/archive/samba/2018-February/213656.html >> >> The problem I am facing is that the machine accounts are not trusted >> in the domain

Hello, I'm having one strange issue with latest stable Samba 4.0.4. I'm testing it as a domain controller for two virtual machines. The Samba AD DC is Debian stable, with two domain members - Windows XP Pro and trial Windows 8 Enterprise. User configuration using GPOs is working as expected. However, Computer configuration is never applied properly. Event logs show this entry: ------

On 02/06/2018 03:24 PM, L.P.H. van Belle via samba wrote: > ok, > > do the following. > set ignore systemacl to yes on sysvol and netlogon. Added "acl_xattr:ignore system acls = yes" to both shares, restarted the server > > login as dom\administrator > computer manager, connect to dc. > share sysvol, goto share security, reset to defalts. > same for

now, im on a phone and no browser, so limit help. first thing i see.   CN=Bj”rn <User>,CN=Users,DC=rootrudi,DC=de Bj”rn ?  is your system set to utf8? i dont know, but this does not look right. i see, wifi? yes, try utp. langsame Verbindung:500 kbps and do try the ignore systemacl.  that solves the user/group “nt authority\system” problems the easy way. greetz Louis Op 6 feb. 2018

Hai, Ok, for the sysvol. I'll put all steps here again. I suggest start with this one. wget https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-set-sysvol.sh This checks and set the rights to be known to be right. ( aka works great for me ) ;-) Then follow these steps. - login as dom\administrator. - start computer manager, connect to dc. - klik Shared Folders, Shares,

On 02/06/2018 03:13 PM, Rowland Penny via samba wrote: > On Tue, 6 Feb 2018 15:03:16 -0400 > Robert Marcano via samba <samba at lists.samba.org> wrote: > >> Thanks for the information, to use a default GPO was a simple way to >> try to encourage someone to reproduce the problem. >> >> I already created new GPOs (this is a test domain) Using the default

I followed Part 1, Part 3, and Part 4 at this url https://www.tecmint.com/install-samba4-active-directory-ubuntu/ Domain Controller is Fedora 29 with samba-dc-4.9.6-0 installed, the other Windows 10 Pro version 1809 with RSAT installed. The Domain Controller is named dcprimary. I am connected to the domain from the Windows named wks2. In part 4 it steps through configuring a logon banner.

Hello! A Sharing mapping GPO, which I only want to work when the user is in the X group. But it only works when I apply the filter with "Authenticated Users" (Default), when mute for user / group specific does not work. On windows with "gpresult / r" the gpo does not look as loaded. Regards Em 01-06-2017 08:05, Sebastian Arcus via samba escreveu: > On 31/05/17 22:26,

Thanks for help, this is a new domain controller without any modifcations, except one GPO. I have the "Default Domain Policy" and created an addtional GPO, named "test_something". Both are linked at the top of the domain. I configured at the "test_something" GPO: # Interactive logon: Do not require CTRL + ALT + DEL -> activate # Interactive login: Do not

> I think the 10.0.06 entry was created during domain creation. I'd skim > thru dns records from an windows machine if possible and delete all > occurences of unwanted ip adresses. I assume the gpo's still can not be > loaded during logon on the client? Did you inspect gpresult /h result.html? I did remove the record for 10.0.0.6 now. Currently I only have 10.0.1.6 in the DNS

Hi Louis, I don't have a FW enabled on my PC. I even tried to disable the FW on my all my DC's I can telnet to port 389/636/53, they are all open and goes through to my all DC's. Primary DC # Global parameters [global] workgroup = DOMAIN realm = DOMAIN.CORP netbios name = ##SELECTION_END##ZACPRDC002 server role = active directory domain controller idmap_ldb:use rfc2307 = yes

hai Micha,   The why is explained here. https://wiki.samba.org/index.php/The_SYSTEM_Account  Which in the end has todo with SID_BOTH, one sid for a user and group, linux does not understand that correctly.   with : acl_xattr:ignore system acls = [yes|no] When set to yes, a best effort mapping from/to the POSIX ACL layer will not be done by this module. The default is no, which means that Samba

On 11/3/2016 9:59 AM, Marcio Demetrio Bacci wrote: > Thanks Lingpanda101 > > Following the result of command: > > # file: Policies/{0F1E5B10-3640-4FFE-AA6B-5DE4CFF73625} > # owner: 10060 > # group: 30028 > user::rwx > user:10060:rwx > user:3000002:rwx > user:3000010:r-x > group::rwx > group:30028:rwx > group:30032:r-x > group:30033:rwx >