similar to: Roaming Profiles with Windows ACLs

On 10/12/2016 1:34 PM, Mark Nienberg via samba wrote: > Well, the easy fix is to add this to the share definition: > > admin users = "@STA\domain admins" > > The wiki implies that this should not be necessary, so I don't know if the > wiki is wrong or if I failed to follow it correctly. This was my first > share using Windows ACLS and it was an interesting

On Fri, Oct 7, 2016 at 12:38 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > have you given Domain Admins the required rights ? > > net rpc rights grant DOMAIN\\"Domain Admins" > SeDiskOperatorPrivilege -UAdministrator > Yes. I followed this wiki example: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs Here is some output: [nienberg at

On 10/12/2016 7:32 PM, Mark Nienberg wrote: > Yes, it looks like this: > > https://wiki.samba.org/index.php/Implementing_roaming_profiles#Profile_share_using_Windows_ACLs > > but as I say, it works now that I have added the admin users, so I am > satisfied for now. > > On Wed, Oct 12, 2016 at 11:31 AM, lingpanda101--- via samba > <samba at lists.samba.org

On Fri, 7 Oct 2016 12:19:09 -0700 Mark Nienberg via samba <samba at lists.samba.org> wrote: > I've set up a profiles share according to the wiki article: > https://wiki.samba.org/index.php/Implementing_roaming_profiles > > Users are able to create new roaming profiles and they cannot browse > each others' profiles, so all that is working. The only issue is that >

I have a problem that I am unable to sort out. Maybe someone can assist with advice and troubleshooting. Client computer is Windows 10 Pro with latest updates as of today. Servers are a Windows 2019 Standard (logon and AD server) and a Samba 4.11 running on Ubuntu (domain member. AD account configured with account profile \\hp-fssrv\profiles\<username>. Home directory is mapped to

Hey all, I decided to use the default ranges in the smb.conf of my member server, so I changed my smb.conf and it looks like that: ================================================== [global] netbios name = MEMBERSRV workgroup = MYDOM security = ADS realm = MYDOM.EXAMPLE.COM encrypt passwords = yes idmap config MYDOM:backend = ad idmap

Yes, it looks like this: https://wiki.samba.org/index.php/Implementing_roaming_profiles#Profile_share_using_Windows_ACLs but as I say, it works now that I have added the admin users, so I am satisfied for now. On Wed, Oct 12, 2016 at 11:31 AM, lingpanda101--- via samba < samba at lists.samba.org> wrote: > On 10/12/2016 1:34 PM, Mark Nienberg via samba wrote: > >> Well, the

On 28/03/2023 15:08, Peter Carlson via samba wrote: > > On 3/28/23 01:33, Rowland Penny via samba wrote: >> >> >> On 28/03/2023 01:59, Peter Carlson via samba wrote: >>> I am having troubles with windows ACLs.? I have been following the >>> wiki >>> (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) and must have messed

On 28/03/2023 17:41, Peter Carlson via samba wrote: > > On 3/28/23 08:40, Rowland Penny via samba wrote: >> >> >> On 28/03/2023 15:50, Peter Carlson via samba wrote: >>> >>> On 3/28/23 07:36, Rowland Penny via samba wrote: >>>> >>>> >>>> On 28/03/2023 15:08, Peter Carlson via samba wrote: >>>>>

On Sun, 23 Apr 2017 20:53:39 +1000 Henry via samba <samba at lists.samba.org> wrote: > root at aphrodite:~# getfacl -d /srv/samba/data/Testing > getfacl: Removing leading '/' from absolute path names > # file: srv/samba/data/Testing > # owner: root > # group: domain\040admins > > However in Windows I am still unable to edit the "Security" >

On Tue, Jun 13, 2017 at 1:17 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 13 Jun 2017 12:25:32 +0200 > Neil <nwilson123 at gmail.com> wrote: > > > Hi Rowland, > > > > Thank you for the reply and info. > > > > On Tue, Jun 13, 2017 at 11:19 AM, Rowland Penny <rpenny at samba.org> > > wrote: > > >

Hi all, Sorry to repost about this same issue once again, but I'm really at a complete loss as to how to solve the problem with ownership being changed after I've set it. I've set ownership as follows... ( set this by chmod -R 0770 HR, as well as chgroup -R HR-Group, I then signed into a Windows PC that was part of the domain, went to computer management as per the WIKI and chose

On Fri, 26 Jan 2018 14:18:53 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Fri, 26 Jan 2018 14:10:40 +0100 > Micha Ballmann <ballmann at uni-landau.de> wrote: > > > To set share windows permissions and windows acl i login on a > > windows 7 computer with the administrator user.|Open ||Computer > > Management and connect to the

On 2017-04-23 17:01, Rowland Penny wrote: > On Sun, 23 Apr 2017 14:07:44 +1000 > Henry via samba <samba at lists.samba.org> wrote: > >> Following: >> >> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs >> >> In windows: >> >> I can set permissions under the "Share Permissions" tab. >> >> I am

Hello! I am following the how to https://wiki.samba.org/index.php/User_home_drives But even though there reported a process for User X does not access the home of Y User, this is happening root at fileserver:/srv/samba# getfacl home/ # file: home/ # owner: root # group: root user::rwx user:root:rwx user:administrator:rwx group::r-x group:root:r-x group:5007:r-x group:domain\040admins:rwx

I guess you want getent group, so i give you both. But administrator is the only user of "domain admin" group with problems. [root at fileserver ~]# getent passwd Domain\ Admins [root at fileserver ~]# getent group Domain\ Admins domain admins:x:512: [root at fileserver ~]# ls -la /partages/share total 181260 drwxrwxrwx+ 2 root root 4096 26 mars 2013 . drwxr-xr-x 13

Hi, On Windows Server 2008 R2 Enterprise Profiles path: \\fs\profiles\rprofile On Centos Version 7 Samba Version 4.7.1 ROLE_DOMAIN_MEMBER [profiles] comment = Users profiles path = /profiles browseable = No read only = No force create mode = 0600 force directory mode = 0700 csc policy = disable store dos attributes = yes

Hi Rowland, Thank you for the reply and info. On Tue, Jun 13, 2017 at 11:19 AM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 13 Jun 2017 09:15:40 +0200 > Neil via samba <samba at lists.samba.org> wrote: > > > OK, this a DC and therefore you will have to do things differently from > a Unix domain member. > > You might as well remove these lines from

Sorry for my mistake. It resolve the groupmap problem : [root at fileserver ~]# net groupmap list Administrators (S-1-5-32-544) -> BUILTIN\administrators Users (S-1-5-32-545) -> BUILTIN\users But i still have the administrator problem. I have follow the wiki.samba doc and i have set the SeDiskOperatorPrivilege : net rpc rights list accounts -U'DOMAIN\administrator' DOMAIN\Domain

> So id administrator didn't return anything on DC or on Fileserver. ow.. but administrator on a DC should retun id 0 .. without any mappings. try setting or "authenticated users", or put "everybody" back on the share rights and test again. whats the primary group of the Administrator? Did you leave it at "domain user" or did you change it to the