similar to: using Windows AD unwanted Group rights get applied to new Files

On Tue, 07 Aug 2018 22:43:23 +0100 Miguel Medalha via samba <samba at lists.samba.org> wrote: > > By default, every AD user is a member of 'Domain Users' and so, > > when you use the 'rid' backend every Unix user gets the group as > > their primary group. > > > The only way to change this is by using a version of Samba >= 4.6.0 > > and

On Fri, 10 Aug 2018 13:20:15 +0100 "miguel medalha" <medalist at sapo.pt> wrote: > > > > By default, every AD user is a member of 'Domain Users' and so, > > > > when you use the 'rid' backend every Unix user gets the group as > > > > their primary group. > > > > > > > The only way to change this is by using

On Fri, 10 Aug 2018 14:32:01 +0100 "miguel medalha" <medalist at sapo.pt> wrote: > > >having a particular group > > > set as "Primary group" > > > How are setting the 'primary group' ? > > The 'primary group' had been set a long time ago, when the system was > created. It had been set with ADUC, under the

> > > By default, every AD user is a member of 'Domain Users' and so, > > > when you use the 'rid' backend every Unix user gets the group as > > > their primary group. > > > > > The only way to change this is by using a version of Samba >= 4.6.0 > > > and use the 'ad' backend (...) > > > > You can also

On Fri, 10 Aug 2018 15:19:03 +0100 "miguel medalha" <medalist at sapo.pt> wrote: > > > What does 'getent passwd ausername' return on a Unix domain member ? > > For that same user, it returns the user ID and the ID for "Domain > users". Then the users primary group is 'Domain Users' and this is what Unix will use to create

> > I logged on to Windows 7 as a regular user > What do you mean by 'regular user' ? I used the expression 'regular user' because I wanted to make it clear that this user does not have any administrative rights whatsoever. > >having a particular group > > set as "Primary group" > How are setting the 'primary group' ? The

Hai, But i did understand you, so no i was not taking you wrong ;-) I did not see it as a "bad intention". I tried to repond funny.. with we can know everything.. :-/ .. im just not funny .. Any correction is good als long it has something why/how/where. You gave a an update in the packages RSAT for Win10, ao im a happy camper also with your comment. Greetz, Louis >

On Tue, 7 Aug 2018 11:52:31 +0000 VELARTIS Philipp Dürhammer <p.duerhammer at velartis.at> wrote: > HI, > > Ubuntu 16.04 newest Updates. Windows 2016 Server RD and > Domaincontroller. When we set the rights through windows everything > is fine. But creating Files on Windows Share adds allways the primary > group "Domänen-Benutzer" to the file. And every user is

Hi, Anyone know why I don't get the properties window when I try to create a new user or view a user's properties. Was working fine last week when I created 3 or 4 test users. I'm using the same workstation I had installed RSAT on and created the users with before. Any idea's? -- Regards, Phil

> On 04 Jun 2016, at 22:14, Miguel Medalha <medalist at sapo.pt> wrote: > > >> Can someone therefore please explain to me what exactly these GPO >> restrictions are that Samba can't handle? I'd also appreciate if someone >> could list which other GPO I cannot set successfully using RSAT. > > It seems to me that the FAQ is pretty clear. The

Hi, we have some Samba shares joined a existing Windows AD. Everything works well with complex user rights. But the problem ist that when a user creates a new file the standard windows group (domain-user) is also applied as a permission to the file. This breaks all the security because all users have now full acess to this file. (because all users are in the domain-user group) All parent

> Full ack! +1 > > Regards > Tim > > Am 12. Februar 2015 22:12:45 MEZ, schrieb Miguel Medalha > <miguelmedalha at sapo.pt>: >> >> I am using a Samba 4.1.16 as an Active Directory domain controller. >> >> After a lot of time complaining to myself that my users' properties >> sheet in ADUC did not contain the Unix Attributes tab, it

I am using a Samba 4.1.16 as an Active Directory domain controller. After a lot of time complaining to myself that my users' properties sheet in ADUC did not contain the Unix Attributes tab, it finally occurred to me that I should look again into Windows 7 >> Control Panel >> Programs and Features >> Turn Windows Features on and off. Lo and behold, there it is: under

I was permitted too. But you were faster. :-) Possibly it's also worth to mention here: https://wiki.samba.org/index.php/Samba_AD_management_from_windows I don't have a computer right now and it's difficult/not so comfortable to edit with a mobile. Am 14. Februar 2015 00:11:08 MEZ, schrieb miguelmedalha at sapo.pt: > >> Full ack! +1 >> >> Regards >> Tim

Hai,   No Win7 is not required, its just that the first version had some problems like missing that tab. No, its not a Samba issue, MS removed some parts from RSAT. Its on the wiki. Is it working now, keep it.   @Miguel. > Why point to third party links instead of the proper link to the original Microsoft page? The version there is the patched version with a working properties tab, i

Hi list, Today, I spent most of the day figuring out why my password policies set via GPO are not applied on a domain level, just to find out that this is not one of the many occasions where Windows is the problem but it's really Samba, for a change. Apparently, password policies can only be changed using samba-tool and not via GPO. IMO, the FAQ is not very clear here.

Full ack! +1 Regards Tim Am 12. Februar 2015 22:12:45 MEZ, schrieb Miguel Medalha <miguelmedalha at sapo.pt>: > >I am using a Samba 4.1.16 as an Active Directory domain controller. > >After a lot of time complaining to myself that my users' properties >sheet in ADUC did not contain the Unix Attributes tab, it finally >occurred to me that I should look again into

I hope that someone here can give some advice on the following: I have a Samba based Active Directory. A CentOS 7.6 machine runs as a file server and hosts the Windows user profiles for all the Windows workstations. Now management has decided that they need a Windows server for a couple of administrative applications, which need MS SQL Server. That would be the only role of this Windows.

On 07/09/15 22:07, Robert Moskowitz wrote: > Right now, RSAT seems not to be an option for me, as the only Win > systems here are XP... > > None of my PDC users were brought over with classicupdate. Perhaps > becuase my users are LINUX user accounts? And the home directories > map to /home/user ? Not having seen your old setup, but if you had a PDC, the users & groups

On 10/12/14 21:53, Tim wrote: > > Am 10. Dezember 2014 22:26:52 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >> On 10/12/14 21:05, Tim wrote: >>> Thanks for your answer and time you offer for me. That makes it a bit >>> clearer. >>> >>> I searched the web and found that rsat needs to have the nis tools >>> installed.