similar to: Samba AD has empty Default GPOs

What about DC as primary domain controller? No Windows servers. Only clients. On Mon, May 29, 2017 at 5:19 PM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 29 May 2017 17:01:56 -0400 > Philippe Clérié via samba <samba at lists.samba.org> wrote: > > > Is it normal for a fresh installation of Samba to have empty Default > > Domain Controllers Policy and

Hello, Quick question: Can Samba host Work Folders? I've just started looking at the issue and the "feature" does require a server role, which I suppose is some new protocol that may not be implemented in Samba. Thanks Philippe The trouble with common sense is that it is so uncommon. <Anonymous>

I recently discovered that only the Default Domain Policy is being applied. All other GPOs seem to be ignored. All Sysvol filesystem objects have the right permissions. Both DCs are running Samba 4.4.3 over CentOS 7. There are no related errors in logs or Windows Event Viewer. Other policies did work before. I noticed that the corresponding filesystem objects were lastly placed on users’ desktops

Try: http://samba.bigbird.es/doku.php?id=samba:sync-sysvol I would recommend one way sync always from PDC FSMO owner, as this is the machine the GPOs get created in by default. And of course : http://samba.bigbird.es/doku.php?id=samba:sync-idmap.ldb Regards. LP On 5 Dec 2023 at 13:47 +0100, Jakob Curdes via samba <samba at lists.samba.org>, wrote: > Hello, > > I am wondering

Hello, I am wondering whether I have all pieces together for a scenatio with two DCs and GPOs being used. Obviously the GPOs need to be replicated between DCs, I use "osync" as per the samba wiki (https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround). In that documentation the sysvolreset command is issued every time on the second DC after

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

Hello, I've been trying to install the WDS role on a Windows 2012R2 server that is a member of a Samba AD (Ubuntu Xenial 4.3.x). WDS refuses to run, throwing two errors related to WDSIMGSVR. 1) Event 266: An error occurred while refreshing settings. Error information 0x3A. 2) Event 258: An error occured while trying to initialize the Windows Deployment Service image server. Error

Hello, I'm trying to automate the creation of several small samba AD DCs, each with a different domain. Samba tool works fine for creating a brand new domain, but I haven't seen any functionality for manipulating the directory structure of a new domain. Specifically, I'd like to automate the creation of a standard set of OUs, security groups and GPOs. I'm wondering whether

Hello, i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT Kerberos (clean, not upgraded). I just wan to create/activating a simple GPOs. # Interactive logon: Do not require CTRL + ALT + DEL -> activate # Interactive login: Do not displa last user name -> activate When im activating this Policys (no errors or something like that) nothing happend. I reboot two Domain

On Tue, 6 Feb 2018 15:03:16 -0400 Robert Marcano via samba <samba at lists.samba.org> wrote: > Thanks for the information, to use a default GPO was a simple way to > try to encourage someone to reproduce the problem. > > I already created new GPOs (this is a test domain) Using the default > filter for a new GPO, "Authenticated users", creating a new group for

On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: > On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >> Hello, >> >> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >> Kerberos (clean, not upgraded). I just wan to create/activating a >> simple GPOs. >> >> # Interactive logon: Do not require CTRL + ALT + DEL -> activate

Who am I to say this? I am only a lowly user and would-be admin, but it seems to me that one of the most useful features of an AD environment, GPOs, is not fully trust-able under Samba because of instability and ensuing fear, before and after each update, related to sysvol and who knows what. I still love you, though.

Hi! I have updated our server from Samba 4 alpha 17 to Samba 4.0.1. Everything seems to work fine after some reconfiguration, but our GPOs are not working anymore. Samba 4 alpha 17 was using ntvfs and the root partition with the sysvol share was mounted with "user_xattr" only in /etc/fstab. Samba 4.0.1 is now set to use s3fs and the root partition is mouted with

Hello all, some time ago I've posted on samba.internals but did get no answer to my question. I hope that someone on this list can give me some help. I have migrated a Win2k AD to samba4 and copied SYSVOL as decribed in this post: https://lists.samba.org/archive/samba-technical/2011-October/080026.html Now I have the problem that only the builtin Administrator can sucessfull modify/add

I'm trying to define the GPOs on my new AD domain, and i'm a little confused. I've never worked with AD, but i've extensively used MLGPO, where i can explicitly apply GPOs to users/groups. Two examples, of my confusion. 1) i've setup password policies (8 chars, 5-row password history, ...), and this is a ''computer'' policy, that apply... to computers. ;-)

now, im on a phone and no browser, so limit help. first thing i see.   CN=Bj”rn <User>,CN=Users,DC=rootrudi,DC=de Bj”rn ?  is your system set to utf8? i dont know, but this does not look right. i see, wifi? yes, try utp. langsame Verbindung:500 kbps and do try the ignore systemacl.  that solves the user/group “nt authority\system” problems the easy way. greetz Louis Op 6 feb. 2018

hai Micha,   The why is explained here. https://wiki.samba.org/index.php/The_SYSTEM_Account  Which in the end has todo with SID_BOTH, one sid for a user and group, linux does not understand that correctly.   with : acl_xattr:ignore system acls = [yes|no] When set to yes, a best effort mapping from/to the POSIX ACL layer will not be done by this module. The default is no, which means that Samba

On 02/07/2018 05:01 AM, L.P.H. van Belle via samba wrote: > Hai, > > Ok, for the sysvol. > I'll put all steps here again. > > I suggest start with this one. > wget https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-set-sysvol.sh > This checks and set the rights to be known to be right. ( aka works great for me ) ;-) > Thanks, but before I run that

Hi Am 29.04.19 um 10:33 schrieb L.P.H. van Belle via samba: > Hai Mason, > > I only dont have the time to work this out now. > But the 2 Stefan'ss have done this part. > > Script + proxymod : Stefan Kania, ask him if he is willing to share his vagrant vm setup. I read my name :-) Yes I created some vagrant-files and scripts to set up some DCs. I did this for my tutorial

samba-4.8.12 on 2 DCs, replication works ... An external admin joined a new PC and the GPOs aren't pulled ... we get something like "user has no rsop data" Additionally if I run the RSAT(?) tool on a windows member server it also has issues connecting to the AD. I can connect by entering a IP of a DC, though. I suspect a missing/wrong DNS entry?