similar to: workaround needed for Security Principals, and SID's mapping bug.

Hai Rowland, This happens when im creating a "Scheduled task" , this task needs NT AUTHORITY\System but you need to select the account, when you select the account a sid/rid mapping is done and this fails. Resulting in the windows event id and error code. While searching for that i found that i cant type the username. You must select it. To reproduce. Create a GPO : Computer

Am 01.12.2016 um 13:35 schrieb L.P.H. van Belle via samba: > Hai Rowland, > > This happens when im creating a "Scheduled task" , > this task needs NT AUTHORITY\System but you need to select the account, > when you select the account a sid/rid mapping is done and this fails. > Resulting in the windows event id and error code. > While searching for that i found that i

Hai, Does anyone know more if this is adressed or point me to the bug report? There should be one, but i cant find it. Im finding the following again, tested with samba 4.4.5, now samba 4.5.3. These reports go back to the year 2013. I searched in my mail samba folder for S-1-5-18 The problem. I create a "computer" Scheduled task. Now this task MUST run as : SYSTEM (S-1-5-18)

Editing the xml.. results in same error. ( which is logical ) The exact event from windows. Eventlog info: Source : Group Policy Scheduled Tasks. ID : 4098 USER : SYSTEM Error code : Group Policy object did not apply because it failed with error code '0x80070534 No mapping between account names and security IDs was done.' This error was suppressed. So I'll wait until this

Exact, and at this point, im at also. Here, typing the username results in the windows event and errors out. Did a lot of research and im 100% this is and missing mapping. Typing does not works, i dont know if this is a windows thing or a samba thing. But i found several reports where in a windows 7+ with Server 2008 also errors if you type the username. And thanks you for having a look..

Are you sure that was the only change? :-/ Tried it out, but wbinfo --lookup-sids=S-1-5-18 wbcLookupSids failed: WBC_ERR_INVALID_SID Could not lookup SIDs S-1-5-18 Does this possible has anything todo with AD/RID setups? Im on a AD setup. Selecting the users SYSTEM though search still resolve back to NTDOM\System :-) Well.. lunch first. Greetz, > > -----Oorspronkelijk

Steps to reproduce. Try this: 1.Viewing/Edit a GPO, go to Computer Configuration > Control Panel Settings > Scheduled Tasks. 2.Right-click in the window and choose New > Scheduled Task (At least Windows 7). 3.On the General tab: a.Set the name to TestSchedule. b.Run the task as NT AUTHORITY\System. Check Run with highest privileges. c.Click OK. 3b, try, klik change user/group.

On Tue, 24 Jan 2017 15:02:14 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai, > > Does anyone know more if this is adressed or point me to the bug > report? There should be one, but i cant find it. > > Im finding the following again, tested with samba 4.4.5, now samba > 4.5.3. These reports go back to the year 2013. > I

Hai, In reponse to the why i recommend that. Since this is a "windows" only share, i recomment to set it up for that usage, with results in better matching for windows rights. Resulting in better working policies. The current POSIX rights did not match to my needs and resulted in inconsistant policies. This is why i use these for profiles and sysvol. And this is my setup order:

Hi I have setup a Samba AD and connected a Windows 7 machine to the AD... I'm having problems getting the Remote Desktop Users group to work... [root at bart private]# samba-tool group addmembers "Remote Desktop Users" mj ldb_wrap open of secrets.ldb Added members to group Remote Desktop Users [root at bart private]# samba-tool group listmembers "Remote Desktop

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny via > samba > > So you fixed it and not disable-ing it. ..... > > No, he borked it. Yeah, my typos.. :-( thats what i meant.. > > > > > You system used id range 0-1000+ ( and first user gets 1000 ) > > The Windows | BUILDIN matches : idmap

Hai, After lots of testing and checking today im must concluded that achim and mathias are right. There are "BUILDIN\" security groups which make some GPOs are going wrong. Also, im getting errors again with sysvolcheck. .. i was in the understanding this was resolved.. but im but off with all info, very buzy at the office atm. samba-tool ntacl sysvolcheck ERROR(<class

Hi My next try is to create the group myself, but the point here was that the Builtin group created by the provisioning of Samba, doesn't work... /Martin ----- Original meddelelse ----- Fra: "L.P.H. van Belle" <belle at bazuin.nl> Til: "samba" <samba at lists.samba.org> Sendt: onsdag, 2. marts 2016 16:55:41 Emne: Re: [Samba] Remote Desktop Users Group not

Hi! I maintain Linux servers that are members of a Samba4 Domain. User authentication / login via ssh works fine with Kerberos. But: only via one hostname. Those machines need a working Kerberos login via multiple hostnames (each hostname has its own IP address and DNS is set up correctly.) "net ads keytab list" of course gives me the main hostname that was in use when joining the

I’ve actually found a solution to my problem, but I wanted to post it here, since someone else might have the problem in the future, and I think it would be nice if I could spare them the week of Googling I needed. Basically, I have an AD member server, running Samba 4.2.10 (on Centos 7.2.1511). Here’s my smb.conf: [global]         workgroup = SUBDOMAIN         server string = Samba Server

No, i believe that guy is wrong. MS-DTYP https://msdn.microsoft.com/en-us/library/cc980032.aspx NT AUTHORITY\SYSTEM S-1-5-18 NT AUTHORITY\authenticated users S-1-5-11 Etc etc. Monday i'll have a look again. Have a nice weeken everybody. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Achim Gottinger > via

Did looked up some old threads. it started here : Nov 2013 https://lists.samba.org/archive/samba/2013-November/177110.html Then https://lists.samba.org/archive/samba/2014-June/182429.html On this link, test there shows on the DC.. root at DC2:~# wbinfo -G 3000002 S-1-5-18 root at DC2:~# wbinfo -s S-1-5-18 NT AUTHORITY+SYSTEM 5 root at DC2:~# so it was working in 2014. that was samba 4.1.x

Yeah, i noticed, tried also adding user and group.. For the domain member, its not a problem. I have a workaround now for my PC which have joined my domain, so i can go ahead with what im testing. Thanks for haveing a look into it. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: Rowland Penny [mailto:rpenny at samba.org] > Verzonden: woensdag 25 januari 2017 12:41 >

Am 02.12.2016 um 09:34 schrieb L.P.H. van Belle via samba: > Exact, and at this point, im at also. > > Here, typing the username results in the windows event and errors out. > Did a lot of research and im 100% this is and missing mapping. > Typing does not works, i dont know if this is a windows thing or a samba thing. But i found several reports where in a windows 7+ with Server

> Op 3 jun. 2017 om 23:07 heeft Rowland Penny via samba <samba at lists.samba.org> het volgende geschreven: > > On Sat, 3 Jun 2017 21:49:15 +0100 > Alex Matthews via samba <samba at lists.samba.org> wrote: > >> I feel you have missed the point of my original post, or maybe I >> wasn't clear enough. This is not a freshly provisioned install, this