similar to: GPOs: only Default Domain Policy is being applied, ohers are ignored

Hello! My Configuration: lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 14.04.3 LTS Release: 14.04 Codename: trusty Version Samba: samba-tool -V 4.4.4 My problem is, create a GPO with group Filtering, in case I want the GPO to be applied only to a specific group. When I do this (Filter) it does not load the GPO, only when I leave the

2018-08-14 20:38 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 14 Aug 2018 20:15:04 +0200 > Michal Sládek via samba <samba at lists.samba.org> wrote: > > > Thank you for your suggestion, I read the whole discussion. > > > > My situation is little bit different - my machine policy works, but it > > stops working once I remove

Thank you for your suggestion, I read the whole discussion. My situation is little bit different - my machine policy works, but it stops working once I remove Apply permission from Authenticated Users and replace it with Read and Apply permission for Domain Computers. Group Policy Results in RSAT shows Reason Denied: Access Denied (Security Filtering) for affected computer. The same result I

> I verified the Wiki doc and here it works like described (without > setting a filter). I did exactly what is described in the Wiki. To > verify, I added a regular domain user to the domain group I set in the > GPO, and after I log in as this user on a domain member, this account > had local admin permissions. > > Doesn't this work in your installation? What happens

2018-08-14 22:51 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 14 Aug 2018 20:52:04 +0200 > Michal Sládek via samba <samba at lists.samba.org> wrote: > > > 2018-08-14 20:38 GMT+02:00 Rowland Penny via samba > > <samba at lists.samba.org>: > > > > > On Tue, 14 Aug 2018 20:15:04 +0200 > > > Michal Sládek via

Servers runs CentOS 7, workstations run Windows 10 Pro with latest updates. I use Tranquil repo: http://samba.tranquil.it/centos7/stable/x86_64/ The whole domain is new, no migration, everything was set up according Samba wiki (which is excellent by the way!) Michal 2018-08-14 21:04 GMT+02:00 Robert Marcano via samba <samba at lists.samba.org>: > On 08/14/2018 02:52 PM, Michal

On Wed, 15 Aug 2018 18:34:58 +0200 Michal Sládek via samba <samba at lists.samba.org> wrote: > 2018-08-15 6:56 GMT+02:00 Michal Sládek <michal at sladkovi.eu>: > > > 2018-08-14 22:51 GMT+02:00 Rowland Penny via samba > > <samba at lists.samba.org> : > > > >> On Tue, 14 Aug 2018 20:52:04 +0200 > >> Michal Sládek via samba <samba at

Hi Louis, Am 03.04.2017 um 17:01 schrieb L.P.H. van Belle via samba: > But thats missing info.. :-( > > Maybe its also a good thing to add just after the first picture on the wiki. > That the security filter on the GPO MUST have "authenticated users" or Domain computer group. > You decide. thanks for bringing this up. I will verify this later. I'm 85% sure, I never

The Wiki page you pointed to describes a modification to the *Default Domain Policy*. This is probably why you never met the issue I described. As I reported on my previous post, the Default Domain Policy was the only one that kept working after the Microsoft update. All the other GPOs that I had set stopped being applied.

Hi list, Very strange problem here on Samba 4.5.2 DCs. We have set up some GPOs and they seem to work fine, however we need to apply some Security Filtering to a couple of them. We can add groups and users until we reach 6 groups/users/computers in the list box in GPO management. As soon as we try to add a 7th entry, GPO Management throws an "Access Denied" error. Even odder is

On 08.04.19 16:20, L.P.H. van Belle via samba wrote: > Hai Basti, > > Anything in the windows even logs? > This might be related to smb1 and windows automaticly removing it. smbstatus say that all open connections are SMB2_10 and SMB3_11 the windows log say: german text and errorcode C0000006 > > Or something else. > Can you check with mtr from a windows pc to the

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H

What for me looks a bit off. This is my output ( part of ) smbstatus -a on the AD-DC. PID Username Group Machine IP Protocol Version Encryption Signing 25843 ADDOM\member-vpn1$ ADDOM\domain computers 192.168.0.2 (ipv4:192.168.0.2:36860) SMB3_11 - AES-128-CMAC 34317 root ADDOM\domain users 192.168.0.5

Samba Guru's, As a point of clarification in our Samba setup... We are currently running Samba 4.3.11 on Ubuntu Server 16.04. When running smbstatus it shows the following... Windows 7 machines connect showing SMB2_10. Windows 10 machines connect showing Unknown (0x0311). Supposedly Windows 10 machines should show SMB3_11. Curious if they are connecting correctly and/or if changes

On Wed, 15 Aug 2018 20:06:02 +0200 Michal Sládek via samba <samba at lists.samba.org> wrote: > I really appreciate your effort to help me, I just don't understand > suggested solution. > > My group policy is related to computer configuration, not user > configuration. Authenticated Users include both users and computers > (once authenticated) so they unnecessarily

On 4/19/2016 2:51 PM, Bill Baird wrote: > /testparm -v | grep "client min protocol"/ > client min protocol = CORE > > On Tue, Apr 19, 2016 at 2:50 PM, lingpanda101 at gmail.com > <mailto:lingpanda101 at gmail.com> <lingpanda101 at gmail.com > <mailto:lingpanda101 at gmail.com>> wrote: > > On 4/19/2016 2:43 PM, Bill Baird wrote: >>

Dear Sébastien, Sorry for the delay, Please check on the log below. As for the word "存取被拒。" it should translate to Access Deny... Please help. - <Event xmlns="*http://schemas.microsoft.com/win/2004/08/events/event <http://schemas.microsoft.com/win/2004/08/events/event>*"> - <System> <Provider Name="*Microsoft-Windows-GroupPolicy*"

Hello, I have try windows 10 in an Samba 4.4.5 NT4-style domain. With some registry hacks (DomainCompatibilityMode and DNSNameResolutionRequired) it can be an member of the domain. When i try to login with domain member i get the error "There are currently no logon servers available to service the logon request" At

I had this issue as well; unfortunately, the fix that isn't recommended by the Samba team is to disable SMB 2/3 on Windows 10, which can break them from connecting to other systems (and that's why it's not recommended). Any reason you can't migrate soon to Samba4 AD? On Thu, Aug 18, 2016 at 11:28 AM, basti via samba <samba at lists.samba.org> wrote: > Hello, > > I

> I would like to know what configuration do you use to run samba 4 > (min/max protocol) with Windows 7,8 and 10 (especially after 1709 > update) at the same time ?     server min protocol = SMB2_10     server max protocol = SMB3_11 The later entry is not needed, it's the current default.