similar to: Deny Access Message with GPO

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H

On Thu, 3 Nov 2016 10:25:00 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 11/3/2016 9:59 AM, Marcio Demetrio Bacci wrote: > > Thanks Lingpanda101 > > > > Following the result of command: > > > > # file: Policies/{0F1E5B10-3640-4FFE-AA6B-5DE4CFF73625} > > # owner: 10060 > > # group: 30028 > > user::rwx > >

I can configure UidNumer and gidNumber attributes by Microsoft RSAT tool and the value is stored. When I click again on the tab "Unix Attributes" appears a message saying "Not is possible the execution". I click OK button and the attribute is correct. Why appear this message? How can I verify if the NIS service is working correctly? Regards, Márcio

See inline comments: On Thu, 3 Nov 2016 19:17:58 -0200 Marcio Demetrio Bacci <marciobacci at gmail.com> wrote: > Hi Rowland > > Following the results to: > > *USER:* > wbinfo --uid-info=10060: > bacci:*:10060:30049:bacci:/home/EMPRESA/bacci:/bin/false > It looks like 'bacci' is a normal user and the owner of the Policies GUID dir should be 'Domain

I have two DC (DC1 and DC2) Samba 4.2.1. In DC1 has 2 pastes in sysvol\ empresa.com.br: Policies and Scripts. But in DC2, the Policies paste there isn't. Is this normal? When I have executed gpresult /r command in Windows client, I verified that DC2 is used to apply GPO for the workstations too. Regards, Márcio

Hi, Sorry, but I have the following doubt: Is need apply the CVE-2017-7494 (Remote code execution from a writable share) patch or this patch already was included in Debian repository, this way I need only to execute apt-get upgrade? In the case that I need to apply manually, how do I do it ? I'm using Samba 4.6.3 on Debian 8. Regards, Márcio Bacci

I implemented a domain Samba 4, but I have the following questions: 1) Primary DC (DC 1) Do I need to Install winbind? 2) Secondary DC (DC 2) Do I need to install the NTP server? 3) Ubuntu 14 Workstations What are the packages needed to join the station in the domain? Regards, Márcio

Hi, I have saw many tutorials to ingress Ubuntu 14 in the Samba4 domain, but none worked properly. I put the Ubuntu workstation in the Domain, but when I try to login, appear the following messenge: "your password will be expire in 42 days " and does not permit the authentication. How can I configure correctly Ubuntu 14 workstation to authenticate in the Samba 4 domain? Thanks

I want to create another DC in my network. Today, my DC is Debian 7 with Samba 4.2.1 compiled (source package). Are ther problem if I install another DC with Debian 8 and Samba 4.1.17 (apt-get -t backports)? I will follow the tutorial below: https://wiki.samba.org/index.php/Join_a_domain_as_a_DC Regards, Márcio

Hi, I have a problem. My domain is EMPRESA.COM.BR and I need to rename to EMPRESA.GOV.BR. Is it possible in Samba 4? How can I migrate users account? I'm using Samba 4.6.3. Regards, Márcio Bacci

Hi, My DC doesn't know domains users and groups by name, only by uid/gid. Ex: chmod mike:'EMPRESA\unix_admins' test chown: invalid group mike:EMPRESA\\unix_admins if run with GID work properly chmod mike:30059 test drwxr-xr-x 2 root 30059 4096 Jul 6 00:17 test There is unix_admins group wbinfo --gid-info 30059 EMPRESA\unix_admins:x:30059: In File Server Domain Member

Hi, The Windows and Linux workstations are not synchronizing the time with the Samba 4 DC. I have verified that the problem is permission. I'm using Samba 4.6.3 on Debian 8. In this way the stations are with different schedules from the DC. Do I need to configure any GPOs? What is the maximum time the computer clock can differ from DC ? Regards, Márcio

Hi, How I apply CVE-2017-7494 in the Samba 4.6.3 ? Do I need to recompile and reinstall the Samba 4, after applying this patch? Regards, Márcio Bacci

I want it when a user if to authenticate to the system a network mapping to be automatically mounted by the /etc/fstab Sample: //192.168.200.3/Commercial /media/Commercial cifs auto,users,username=<domain-user>,passwor=<password> How do I get the domain username of the user logged and the password to set up the mapping? If isn't possible, what is the best way ? I'm using

On 9/4/2015 11:59 AM, Marcio Demetrio Bacci wrote: > Hi James > > Thank you very much! My problem was solved! > > Regards, > > Márcio Bacci > > 2015-09-04 11:53 GMT-03:00 James <lingpanda101 at gmail.com > <mailto:lingpanda101 at gmail.com>>: > > On 9/3/2015 11:02 PM, Marcio Demetrio Bacci wrote: > > My user is member of the 'Group

Hi, I followed the tutorial below to do backup of the Samba4: https://wiki.samba.org/index.php/Backup_and_Recovery When I execute the backup script manually, it is executed perfectly, but when I execute in the crontab, it isn't work. It is my crontab on Debian 7: 0 1 * * 1-5 /usr/sbin/samba_backup Does somebody have an idea ? Regards, Márcio

I have a primary and a secondary DC, however I found that the time of the secondary DC is different from the primary. Do I need to install ntpdate in the secondary DC ? If positive, how I configure it? I'm using samba 4 on debian 7. How can I solve this problem Regards, Márcio Bacci

Hi, I'm trying demote my old DC, but the following message appear: root at dc-old:~# samba-tool domain demote -Uadministrator Using dc1.empresa.com.br as partner server for the demotion Password for [EMPRESA\administrator]: Deactivating inbound replication Asking partner server dc1.empresa.com.br to synchronize from us Failed to bind - LDAP error 8 LDAP_STRONG_AUTH_REQUIRED -

I've been thinking if it's better to make a new Samba 4 DC server instead upgrade the old DC and then transfer the FSMO roles to it and shut down the old server. This way the installation would be cleaner and free of any errors of the old installation. I'm using Samba 4.2.1 and the result of command below is: root at EMPRESA:~# samba-tool fsmo show InfrastructureMasterRole owner:

Hi, I'm using Samba 4.6.5 and I have installed as follows: wget -c https://download.samba.org/pub/samba/stable/samba-4.6.5.tar.gz tar -xzvf samba-4.6.5.tar.gz cd samba-4.6.5 ./configure --enable-debug --enable-selftest make make install It seems that is working properly, however I can't create or update GPO with Windows Group Policy Management tool. When I try, "Denied