similar to: Software installation by GPO ( success and fail )

Hi Elias, > I thought it worked, but after I uninstalled the software that I deployed > via user scope, it did not reinstall. I selected the "Redeploy application" > option, but it also did not work. The user scope GPO are run with the privileges and access tokens of the logged on user, so the user have local admin rights for install and need access rights to the share you

Hey Luke, thanks for the help!!! It's working now!!! God bless you and your family!! :D Remember that GPOs need to run as the context of either the computer or the > user. Computers typically do not have access to many folders on a file > server, even as "Everyone". That is why the NETLOGON folder works. > > If you're deploying as a USER configuration, then it

Hello Folks, We're using Samba as AD servers along with Windows AD Servers (2008R2 FL). We also use SCCM (Current Branch) that is dependent on AD for lab deployments (Windows 10). Currently, SCCM (current branch) supports 2008R2 FL, but for how long??? Samba does not support 2012R2, 2016, 2019 FL. We'd like to remove the Windows Servers from our AD infrastructure, but would also like

I just installed a samba4 dc and I see that Power Users group is missing, is possible to create that group so that a workstation joined in the domain can install software using users belonging to that group and how it can be done? actually simply creating a group with that name doesn't get any privilege to that group users.

Denis, Thank you for the information. I was under the impression that authentication was done through LDAP. I'm not sure what led me to this belief/understanding. How can I confirm that indeed my Linux member server is authenticating with Kerberos, and that it is encrypted? Is Kerberos traffic always encrypted? Thanks, Tim On Mon, Jan 15, 2018 at 10:37 AM, Denis Cardon <dcardon at

Because of other issues using ADUC, I tried to remove a domain member using: > samba-tool group removemembers "Domain Computers" MARKA\$ Removed members from group Domain Computers As shown, it say it "Removed members", but ... > samba-tool group listmembers "Domain Computers" : LABRAT$ : OHPRSSTORAGE$ MARKA$ : COMMON$ : listmembers still shows the computer

Good morning people from Argentine. again bothering with a doubt, It is posiblle, audit change password, create-delete-change users? and more? i have a file server with audit and works really really well and now I want more! any ideas? thanks for samba....i love it

Hi Louis, normally you are building these wonderful samba debian packages for us :-) Is there a reason, that you didnt create packages for samba 4.8? Tfh! Oliver

When trying to join a new DC to an existing Samba4 domain, I am getting this WERR_DS_DRA_MISSING_PARENT error. Does any have any suggestions on how to fix it? My original 6 dc's are running the last free Sernet (4.2.14) on CentOS6 and the error occurs if I use Sernet 4.2.14 or 4.7.5-Debian. I finally have time to upgrade and something is broke. Thanks, Steve # samba-tool domain join

I want to migrate old 2003 domain to Samba - join SAMBA 4.6(DC2) to win 2003 domain like DC, move sysvol, FSMO, demote old server(DC1), etc., etc. - https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory My problem are DNS Updates, I have kerberos working (added enctypes = rc4-hmac for compatibility), SAMBA join without errors, I have created DNS records, can

hi! Query, I have 3 DCs, in each of the servers should have configured the other two DCs in the resolv.conf? or with only the primary is enough? Maybe that's my problem that does not replicate the dc3 with the dc2 thanks to all!

I am trying to run Mongrel 1.1.5 with mongrel_service 0.3.4 on Ruby 1.8.6 with a "normal" user account, i.e. a user which belongs only to the Windows group "Users". The rationale behind this is that running a web server with full administrative rights (e.g. Local System) is not something that I would like to do. Unfortunately, starting the service from the services control

Hi all, I'm running in circles trying to debug replication failures on samba 4.7.6: dc00 : is a VM on KVM host (attached to a bridge on local LAN) dc01 : is a similarly configured VM on another KVM host. I've forcibly demoted and re-promoted dc01 but I still cannot get automatic replication to work: root at dc00 ~]# samba-tool drs showrepl Krynn\DC00 DSA Options: 0x00000001 DSA

Hi guys. I've got working samba AD server. It is playing nicely with Windows 10 and also successfully authenticating Linux machines with SSSD. On the Windows machines I have our EMC storage smb mounted via group policy. Managing permissions for users and groups there, as you know, happens with right click, security etc.. As you may have already guessed the troubles come when my Linux

Hi, Just wondering: What are you guys using to deploy software on your windows (7) workstations within the samba4 AD? These are options I know of: * wpkg (but it seems it's development is not too active) * wpkg-gp using the group policies * www.opsi.org (Client Management System for Windows clients) * standard windows software deployment, but I think that's msi-only This page also has

Hi list, are there preparations for upgrading a samba 4.8.5 to 4.9.1 via van-belle-repository to change the backend db? Is there some handwork necessary? Regards, Oliver

Hi Guys, We're trying to add a BDC in Samb4 classic domain setup. The Samba 3 How -To and Samb3 by Example covers this but uses the old slapd.conf option, we are using the slapd.d config. I couldn't find a similar document for Samba4 Can you please advise that the following steps will work? LDAP in the existing PDC is working using the smbldap tools - Setup the LDAP in BDC

I have just installed a samba 4.7.4 from source. All right! wbinfo -u  and wbinfo -g return the list of users and groups from the domain But I can not use they in the DC filesystem. For instance: # touch ttt # chgrp 'domain admins' ttt chgrp: invalid group: ‘domain admins’ That should I do to ?

Dear list, I had to change the name of the AD DC on a test setup (only one DC). What changes do I have to apply for samba? This is using bind9_DLZ. Thanks, Christian

Hello Denis, thanks for the answer!!! so for accessing a share on the file server, you'll need to add read rights > for "domain computers" group Is this read permission for the domain computer I need to configure in the deploy software GPO, sharing folder or both? psexec -i -s cmd > net use F: \\server\sharename > dir f: At first I was able to execute the