similar to: Cannot change passwords on Active Directory Samba from clients

I'm running a Samba AD 4.7.4 and cannot set a new password for a user with an expired password during login from a Windows PC. Changing a password from inside a login with cntl-alt-del "change password" works ok. I've already decreased the minimum password age to 0 samba-tool domain passwordsettings show Password complexity: on Store plaintext passwords: off Password history

Hi Elias, > I thought it worked, but after I uninstalled the software that I deployed > via user scope, it did not reinstall. I selected the "Redeploy application" > option, but it also did not work. The user scope GPO are run with the privileges and access tokens of the logged on user, so the user have local admin rights for install and need access rights to the share you

Which GPO? Computer or User Configuration? Remember that GPOs need to run as the context of either the computer or the user. Computers typically do not have access to many folders on a file server, even as "Everyone". That is why the NETLOGON folder works. If you're deploying as a USER configuration, then it should run as the context of the user, meaning the Everyone permission

Hey Luke, thanks for the help!!! It's working now!!! God bless you and your family!! :D Remember that GPOs need to run as the context of either the computer or the > user. Computers typically do not have access to many folders on a file > server, even as "Everyone". That is why the NETLOGON folder works. > > If you're deploying as a USER configuration, then it

Hello list, I tried to set up a folder on our fileserver domain member, so I can deploy software for users' machines, but is not working. If I put the software inside "netlogon" it installs correctly. \\172.16.1.7\storage\programs Auth Users - read & execute, list folder contents, read and write Do I need other permissions? -- Elias Pereira

Anything in the logs? On Fri, Jun 2, 2017 at 8:01 PM, Luke Barone via samba <samba at lists.samba.org > wrote: > Hi list, > > We are working on getting Samba version 4.5.8-debian (on Stretch) with > Active Directory running, and we are running into a major road block. > Clients (Windows 7 Pro, Windows 10 Pro and Educational) cannot change their > passwords on their own.

Hi, thanks for your help. Your suggestion makes sense, however I think there should be some way for users to be able to change an expired password from login dialogue.  Actually I had a problem doing this previously with NT4 style Samba domain and never looked into a resolution.  Now that I've found Samba does AD style domain, I'm excited to use it in several customer locations.  Since I

On win8.1 & srv2012r2 it is "The password for this account has expired" On 01/17/2018 10:44 PM, Luke Barone wrote: > (Remember to reply all) > > What error message, *specifically*, comes up when the user with the > expired password attempts to change it? > > On Jan 17, 2018 7:36 PM, "Ken McDonald" <ken at generation.tech> wrote: > > To

On 30.08.2023 16:21, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 12:40:08 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 30.08.2023 11:58, Rowland Penny via samba wrote: >>> On Wed, 30 Aug 2023 09:49:05 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> On

On 30.08.2023 11:58, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 09:49:05 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 29.08.2023 21:38, Andrew Bartlett via samba wrote: >>> On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: >>>> On 27.08.2023 23:45, Andrew Bartlett wrote: >>>>>

On Wed, 30 Aug 2023 12:40:08 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 30.08.2023 11:58, Rowland Penny via samba wrote: > > On Wed, 30 Aug 2023 09:49:05 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > >>>

On Wed, 30 Aug 2023 18:56:48 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 30.08.2023 16:21, Rowland Penny via samba wrote: > > On Wed, 30 Aug 2023 12:40:08 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 30.08.2023 11:58, Rowland Penny via samba wrote: > >>> On

On 30.08.2023 19:17, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 18:56:48 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 30.08.2023 16:21, Rowland Penny via samba wrote: >>> On Wed, 30 Aug 2023 12:40:08 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> On

On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: > Hi folks, > > I just wonder why it is not possible to set domain password policies > with GPO, using the Windows RSAT Group Policy Manager? For most > other > settings, using GPOs through RSAT works. > > For somebody who sets up a Samba AD DC infrequently, this is a huge > trap. There should be a

Hello, I'd like to know if the following issues happen to you too. 1. Sysvol permissions After I edited a GPO with a user which is member of domain Admins, sysvolcheck runs on an error due to security settings of thisvedited GPO. Running sysvolreset makes it all for he again 2. GPO password policy We have a policy that defines a password change interval of 32 days. On our clients (windows

On 27.08.2023 23:45, Andrew Bartlett wrote: > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >> Hi folks, >> >> I just wonder why it is not possible to set domain password policies >> with GPO, using the Windows RSAT Group Policy Manager? For most >> other >> settings, using GPOs through RSAT works. >> >> For somebody who sets

Hi Andrew and Louis, Found the issue: after rsync-ing the sysvol from our old decommissioned DCs, the sysvolreset/sysvolcheck DO work out. I tried to keep the things simple first, by NOT immediately importing our old sysvol contents, but first check with a default sysvol... I thought that the sysvolreset would just reset whatever is located under samba/sysvol, but I guess that it reads the

On Wed, 30 Aug 2023 09:49:05 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > > On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: > >> On 27.08.2023 23:45, Andrew Bartlett wrote: > >>> On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >

On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: >> On 27.08.2023 23:45, Andrew Bartlett wrote: >>> On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >>>> Hi folks, >>>> I just wonder why it is not possible to set domain password >>>> policieswith GPO,

On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: > On 27.08.2023 23:45, Andrew Bartlett wrote: > > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: > > > Hi folks, > > > I just wonder why it is not possible to set domain password > > > policieswith GPO, using the Windows RSAT Group Policy Manager? > > > For