similar to: GPOs: only Default Domain Policy is being applied, ohers are ignored

Hello! My Configuration: lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 14.04.3 LTS Release: 14.04 Codename: trusty Version Samba: samba-tool -V 4.4.4 My problem is, create a GPO with group Filtering, in case I want the GPO to be applied only to a specific group. When I do this (Filter) it does not load the GPO, only when I leave the

2018-08-14 20:38 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 14 Aug 2018 20:15:04 +0200 > Michal Sládek via samba <samba at lists.samba.org> wrote: > > > Thank you for your suggestion, I read the whole discussion. > > > > My situation is little bit different - my machine policy works, but it > > stops working once I remove

Thank you for your suggestion, I read the whole discussion. My situation is little bit different - my machine policy works, but it stops working once I remove Apply permission from Authenticated Users and replace it with Read and Apply permission for Domain Computers. Group Policy Results in RSAT shows Reason Denied: Access Denied (Security Filtering) for affected computer. The same result I

> I verified the Wiki doc and here it works like described (without > setting a filter). I did exactly what is described in the Wiki. To > verify, I added a regular domain user to the domain group I set in the > GPO, and after I log in as this user on a domain member, this account > had local admin permissions. > > Doesn't this work in your installation? What happens

2018-08-14 22:51 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 14 Aug 2018 20:52:04 +0200 > Michal Sládek via samba <samba at lists.samba.org> wrote: > > > 2018-08-14 20:38 GMT+02:00 Rowland Penny via samba > > <samba at lists.samba.org>: > > > > > On Tue, 14 Aug 2018 20:15:04 +0200 > > > Michal Sládek via

Servers runs CentOS 7, workstations run Windows 10 Pro with latest updates. I use Tranquil repo: http://samba.tranquil.it/centos7/stable/x86_64/ The whole domain is new, no migration, everything was set up according Samba wiki (which is excellent by the way!) Michal 2018-08-14 21:04 GMT+02:00 Robert Marcano via samba <samba at lists.samba.org>: > On 08/14/2018 02:52 PM, Michal

On Wed, 15 Aug 2018 18:34:58 +0200 Michal Sládek via samba <samba at lists.samba.org> wrote: > 2018-08-15 6:56 GMT+02:00 Michal Sládek <michal at sladkovi.eu>: > > > 2018-08-14 22:51 GMT+02:00 Rowland Penny via samba > > <samba at lists.samba.org> : > > > >> On Tue, 14 Aug 2018 20:52:04 +0200 > >> Michal Sládek via samba <samba at

I am facing a strange problem with AD GPOs. I have had numerous GPOs working correctly for years but now, following the installation of new servers with a new Samba version, I am unable to create a new GPO with RSAT. I can configure it alright but it fails when I try to apply the respective rights under "Delegation > Advanced". As soon as I apply the permissions, it fails with the

Hi Louis, Am 03.04.2017 um 17:01 schrieb L.P.H. van Belle via samba: > But thats missing info.. :-( > > Maybe its also a good thing to add just after the first picture on the wiki. > That the security filter on the GPO MUST have "authenticated users" or Domain computer group. > You decide. thanks for bringing this up. I will verify this later. I'm 85% sure, I never

The Wiki page you pointed to describes a modification to the *Default Domain Policy*. This is probably why you never met the issue I described. As I reported on my previous post, the Default Domain Policy was the only one that kept working after the Microsoft update. All the other GPOs that I had set stopped being applied.

Hi list, Very strange problem here on Samba 4.5.2 DCs. We have set up some GPOs and they seem to work fine, however we need to apply some Security Filtering to a couple of them. We can add groups and users until we reach 6 groups/users/computers in the list box in GPO management. As soon as we try to add a 7th entry, GPO Management throws an "Access Denied" error. Even odder is

On 08.04.19 16:20, L.P.H. van Belle via samba wrote: > Hai Basti, > > Anything in the windows even logs? > This might be related to smb1 and windows automaticly removing it. smbstatus say that all open connections are SMB2_10 and SMB3_11 the windows log say: german text and errorcode C0000006 > > Or something else. > Can you check with mtr from a windows pc to the

Hi, We have a NAS server with OpenMediaVault on a Debian system. Mainly we work directly with documents from the LibreOffice and Office tools. Sometimes we note at the opening of a LO document that the file is corrupted and not repairable. We know LO documents are a bunch of files embeded in a compressed ZIP archive. The most of time we can repair them in replacing the corrupted elements

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H

What for me looks a bit off. This is my output ( part of ) smbstatus -a on the AD-DC. PID Username Group Machine IP Protocol Version Encryption Signing 25843 ADDOM\member-vpn1$ ADDOM\domain computers 192.168.0.2 (ipv4:192.168.0.2:36860) SMB3_11 - AES-128-CMAC 34317 root ADDOM\domain users 192.168.0.5

On Fri, 11 Oct 2024 15:46:23 +0200 "lnj.sam--- via samba" <samba at lists.samba.org> wrote: > Hi, > > We have a NAS server with OpenMediaVault on a Debian system. > > Mainly we work directly with documents from the LibreOffice and > Office tools. > > Sometimes we note at the opening of a LO document that the file is > corrupted and not repairable.

Samba Guru's, As a point of clarification in our Samba setup... We are currently running Samba 4.3.11 on Ubuntu Server 16.04. When running smbstatus it shows the following... Windows 7 machines connect showing SMB2_10. Windows 10 machines connect showing Unknown (0x0311). Supposedly Windows 10 machines should show SMB3_11. Curious if they are connecting correctly and/or if changes

On Wed, 15 Aug 2018 20:06:02 +0200 Michal Sládek via samba <samba at lists.samba.org> wrote: > I really appreciate your effort to help me, I just don't understand > suggested solution. > > My group policy is related to computer configuration, not user > configuration. Authenticated Users include both users and computers > (once authenticated) so they unnecessarily

On 4/19/2016 2:51 PM, Bill Baird wrote: > /testparm -v | grep "client min protocol"/ > client min protocol = CORE > > On Tue, Apr 19, 2016 at 2:50 PM, lingpanda101 at gmail.com > <mailto:lingpanda101 at gmail.com> <lingpanda101 at gmail.com > <mailto:lingpanda101 at gmail.com>> wrote: > > On 4/19/2016 2:43 PM, Bill Baird wrote: >>

Dear Sébastien, Sorry for the delay, Please check on the log below. As for the word "存取被拒。" it should translate to Access Deny... Please help. - <Event xmlns="*http://schemas.microsoft.com/win/2004/08/events/event <http://schemas.microsoft.com/win/2004/08/events/event>*"> - <System> <Provider Name="*Microsoft-Windows-GroupPolicy*"