similar to: Home Folder

Sorry hehehehe I mean, when access RSAT and add the "Home Folder" of the User, and give a Apply, the folder is automatically created with the permissions below, where the "Domain Users" is already linked: getfacl rs-01 / # File: rs-01 / # Owner: administrator # Group: domain \ 040users user :: rwx user: rs-01: rwx user: administrator: rwx group :: r-x group: domain \

Just a tip. If you create users with RSAT and you also uses unix id's ( UID/GID ) Used with AD backend. The first assign the UID/GID and then apply the home dir folders in RSAT. Only for user home dirs. This can help if you also use ssh to login and you cant enter your own home dir. Per example: Your ACL ( for the user ) > # File: rs-01 / > # Owner: administrator > # Group:

Hi Carlos, Your problem is userA can access home directory of userB? If your issue is only that, then you are right, this issue comes from the fact all AD users are, by default, in "Domain users" and your Home directories grant "Domain Users" "r-x" which means "read and enter" when applied to directory. Simply remove "Domain Users" from these

:-| ls -lnd /opt/samba/var/locks/sysvol drwxrwx---+ 3 0 3000000 4096 Jun 16 13:56 /opt/samba/var/locks/sysvol Em 16-06-2017 13:38, Rowland Penny via samba escreveu: > On Fri, 16 Jun 2017 13:15:19 -0300 > "Carlos A. P. Cunha" <carlos.hollow at gmail.com> wrote: > >> OK, sorry, uncomment a line :-D >> >> Yes exist! >> >> ls -ld

Hello I have a Debian 8 with samba (Version 4.2.10-Debian) that serves as Fileserver. My smb.conf [global] workgroup = XXXXX realm = GRUPO.XXXXX.COM.BR security = ADS idmap config * : backend = rid idmap config * : range = 100000-999999 client schannel = no allow trusted domains = yes winbind use default domain = yes

correct is not much different, but you need a "correct" config.   now your config is simpley wrong. ( sorry )   This proves it. one question..          idmap config * : backend = rid          idmap config * : range = 100000-999999 can you write you "rid" to the samba AD.. No.        # - must use an read-write-enabled back end, such as tdb.   you need also : # idmap config

Hai, After lots of testing and checking today im must concluded that achim and mathias are right. There are "BUILDIN\" security groups which make some GPOs are going wrong. Also, im getting errors again with sysvolcheck. .. i was in the understanding this was resolved.. but im but off with all info, very buzy at the office atm. samba-tool ntacl sysvolcheck ERROR(<class

> > On the file serever: > > Collected config --- 2019-07-03-10:27 ----------- > > > > Hostname: srv > > DNS Domain: a.b.hu > > FQDN: srv.a.b.hu > > ipaddress: 10.0.3.15 192.168.0.8 > > ----------- > > Samba is running as a Unix domain member > > ----------- > > > > This computer is running Debian 10.0 x86_64 > >

sorry , the original message was in error. Follow: Hi. Sorry. Today I have a big problem with the samba I can not solve! My permissions do not work properly. in the RSAT created groups, OU and users. I configured in Windows the shared directory *TECNOLOGIA* security settings assigning full permissions to *grupo_tecnologia* (technology group). However users who are with *grupo_tecnologia*

Hai, Ok, i expected a bit different outputs. On my DC, i use /home/samba/sysvol and /home/samba/netlogon. This is what i expected. getfacl /home/samba/ getfacl: Removing leading '/' from absolute path names # file: home/samba/ # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx group::rwx group:BUILTIN\134administrators:rwx

I've set up a profiles share according to the wiki article: https://wiki.samba.org/index.php/Implementing_roaming_profiles Users are able to create new roaming profiles and they cannot browse each others' profiles, so all that is working. The only issue is that the group "domain admins" does not have privileges to read or delete user profiles. The acls on the profiles directory

On 28/03/2023 15:08, Peter Carlson via samba wrote: > > On 3/28/23 01:33, Rowland Penny via samba wrote: >> >> >> On 28/03/2023 01:59, Peter Carlson via samba wrote: >>> I am having troubles with windows ACLs.? I have been following the >>> wiki >>> (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) and must have messed

Finally biting the bullet and upgrading home machines to Windows 7 but experiencing many problems. Server is a Debian Lenny, old Samba 3.2.5, new Samba 4.1.4 built from source. My setup has been doing roaming profiles for XP since 2003 or so with almost no changes. I want to keep roaming profiles going plus do some folder redirection (Desktop (my wife doesn't believe in file shares for

Hello Luis tomorrow i'm not in office, reply to you thursday One question : who is owner and whats rights for dir     /home     /home/samba     /home/samba/sysvol because, from windows client, user into domain admins, when i change in security tab, explorer always crash bye Il 06/11/2018 17:16, L.P.H. van Belle via samba ha scritto: > Ok, next, > > From a windows pc connect to

Hi. Sorry. Today I have a big problem with the samba I can not solve! My permissions do not work properly. in the RSAT created groups, OU and users. I configured in Windows the shared directory *TECNOLOGIA* security settings assigning full permissions to *grupo_tecnologia* (technology group). However users who are with *grupo_tecnologia* (primary) to access the share opens a popup asking for

I believe I have found either a bug or something I do not understand. I recently had a file-share issue and the resolution was to set the "others" permissions to 5, read and execute. The problem with this is that once I am in Windows on a workstation, this appears to allow "Everyone", "CREATOR OWNER", and "CREATOR GROUP" access. We normally setup our

On 01/07/2020 09:03, Enrico Morelli wrote: > On Wed, 1 Jul 2020 08:43:37 +0100 > Rowland penny via samba <samba at lists.samba.org> wrote: > >> On 01/07/2020 08:36, Enrico Morelli via samba wrote: >>> On Tue, 30 Jun 2020 10:28:41 -0700 >>> Jeremy Allison via samba <samba at lists.samba.org> wrote: >>> >>>> On Tue, Jun 30, 2020 at

On 28/03/2023 17:41, Peter Carlson via samba wrote: > > On 3/28/23 08:40, Rowland Penny via samba wrote: >> >> >> On 28/03/2023 15:50, Peter Carlson via samba wrote: >>> >>> On 3/28/23 07:36, Rowland Penny via samba wrote: >>>> >>>> >>>> On 28/03/2023 15:08, Peter Carlson via samba wrote: >>>>>

On Fri, 26 Jan 2018 14:18:53 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Fri, 26 Jan 2018 14:10:40 +0100 > Micha Ballmann <ballmann at uni-landau.de> wrote: > > > To set share windows permissions and windows acl i login on a > > windows 7 computer with the administrator user.|Open ||Computer > > Management and connect to the

I have set up a share on a domain member server and am attempting to set the ACLs from a domain-joined Windows 7 computer as per the WiKi at https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs I want to use one of the BUILTIN groups, Backup Operators to be able to have Full Control on files in the share (as it will be used for backups). However, when trying to assign the