similar to: Group Policy Permissions

Thank you for your suggestion, I read the whole discussion. My situation is little bit different - my machine policy works, but it stops working once I remove Apply permission from Authenticated Users and replace it with Read and Apply permission for Domain Computers. Group Policy Results in RSAT shows Reason Denied: Access Denied (Security Filtering) for affected computer. The same result I

2018-08-14 22:51 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 14 Aug 2018 20:52:04 +0200 > Michal Sládek via samba <samba at lists.samba.org> wrote: > > > 2018-08-14 20:38 GMT+02:00 Rowland Penny via samba > > <samba at lists.samba.org>: > > > > > On Tue, 14 Aug 2018 20:15:04 +0200 > > > Michal Sládek via

On Wed, 15 Aug 2018 18:34:58 +0200 Michal Sládek via samba <samba at lists.samba.org> wrote: > 2018-08-15 6:56 GMT+02:00 Michal Sládek <michal at sladkovi.eu>: > > > 2018-08-14 22:51 GMT+02:00 Rowland Penny via samba > > <samba at lists.samba.org> : > > > >> On Tue, 14 Aug 2018 20:52:04 +0200 > >> Michal Sládek via samba <samba at

2018-08-14 20:38 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 14 Aug 2018 20:15:04 +0200 > Michal Sládek via samba <samba at lists.samba.org> wrote: > > > Thank you for your suggestion, I read the whole discussion. > > > > My situation is little bit different - my machine policy works, but it > > stops working once I remove

Servers runs CentOS 7, workstations run Windows 10 Pro with latest updates. I use Tranquil repo: http://samba.tranquil.it/centos7/stable/x86_64/ The whole domain is new, no migration, everything was set up according Samba wiki (which is excellent by the way!) Michal 2018-08-14 21:04 GMT+02:00 Robert Marcano via samba <samba at lists.samba.org>: > On 08/14/2018 02:52 PM, Michal

Hello, I am trying to export keytab by following this guide: https://wiki.samba.org/index.php/Generating_Keytabs OS: CentOS 7.5 Samba: samba-dc-4.7.6-0.el7.centos.x86_64 (from Tranquil repo) Everything seems to work, but keytab is not exported (keytab file is not created). [root at ads1 /]# net ads enctypes list svc_confluence_sso 'svc_confluence_sso' uses

On Wed, 15 Aug 2018 20:06:02 +0200 Michal Sládek via samba <samba at lists.samba.org> wrote: > I really appreciate your effort to help me, I just don't understand > suggested solution. > > My group policy is related to computer configuration, not user > configuration. Authenticated Users include both users and computers > (once authenticated) so they unnecessarily

2018-08-15 6:56 GMT+02:00 Michal Sládek <michal at sladkovi.eu>: > 2018-08-14 22:51 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org> > : > >> On Tue, 14 Aug 2018 20:52:04 +0200 >> Michal Sládek via samba <samba at lists.samba.org> wrote: >> >> > 2018-08-14 20:38 GMT+02:00 Rowland Penny via samba >> > <samba at

2018-08-15 18:59 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Wed, 15 Aug 2018 18:34:58 +0200 > Michal Sládek via samba <samba at lists.samba.org> wrote: > > > 2018-08-15 6:56 GMT+02:00 Michal Sládek <michal at sladkovi.eu>: > > > > > 2018-08-14 22:51 GMT+02:00 Rowland Penny via samba > > > <samba at

Hello, I think I really need some help on this. Since Samba 4.2.11 upgrade my Windows 10 clients are unable to synchronize group policies. I have asked about this already here <https://lists.samba.org/archive/samba/2016-April/199226.html>. Now I re-investigate the issue with Windows 10 1607 update and still face the same issue which prevents me from rolling out this configuration in

On 08/14/2018 02:52 PM, Michal Sládek via samba wrote: > 2018-08-14 20:38 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > >> On Tue, 14 Aug 2018 20:15:04 +0200 >> Michal Sládek via samba <samba at lists.samba.org> wrote: >> >>> Thank you for your suggestion, I read the whole discussion. >>> >>> My situation is little

On Tue, 14 Aug 2018 20:52:04 +0200 Michal Sládek via samba <samba at lists.samba.org> wrote: > 2018-08-14 20:38 GMT+02:00 Rowland Penny via samba > <samba at lists.samba.org>: > > > On Tue, 14 Aug 2018 20:15:04 +0200 > > Michal Sládek via samba <samba at lists.samba.org> wrote: > > > > > Thank you for your suggestion, I read the whole

Am 09.08.2016 um 22:18 schrieb Achim Gottinger via samba: > > > Am 09.08.2016 um 21:48 schrieb Rainer Meier via samba: >>> I think the 10.0.06 entry was created during domain creation. I'd skim >>> thru dns records from an windows machine if possible and delete all >>> occurences of unwanted ip adresses. I assume the gpo's still can not be >>>

On 6/3/2015 11:43 AM, Ryan Ashley wrote: > James, I cloned it using git. I installed it to a private partition > (/samba) back when I was first testing Samba4. It is in the path and > this worked for ages, but recently just stopped. No errors, no warnings, > nothing. Just dead. > > The GP in question is the default domain policy. I already tried > unlinking it and it fails on

Hello, i configured group policy via RSAT in my samba 4.1.13 implementation the policy applies correctly to my windows 7 clients but not to my windows XP clients. when i run gpupdate /force in windows XP it replies that the policies are apply correctly .... when i run ./samba-tool ntacl sysvolcheck ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception -

Try verifying kvno from the client that gives the error message. That kvno = 2 for dc$ must've come from somewhere. You can also double check e.g. via ADUC ldap attributes of the dc$: lastpwdset and kvno. If  kvno is definately 1 that means that client connecting has some error, if it's 2, than it means that dc has outdated keytab. And if it's the former, than I really am not sure

On Tue, 14 Aug 2018 20:15:04 +0200 Michal Sládek via samba <samba at lists.samba.org> wrote: > Thank you for your suggestion, I read the whole discussion. > > My situation is little bit different - my machine policy works, but it > stops working once I remove Apply permission from Authenticated Users > and replace it with Read and Apply permission for Domain Computers. >

As far as I understand Samba and the wiki in this regard, the Samba4 DC's password policy is no typical domain policy (no GPO). It can't be inherited by Windows clients. So I suspect the full story to be: - on the Unix side (DC and member server) the Samba password rules apply - on the Windows client side the inherited Windows POLICIES apply (as far as possible) In effect, if e.g.

I'm trying to create drive maps via group policy. I've created a new group policy object which is linked to the internal location (ie internal.company.com) and has Security Filtering of "Authenticated Users" I edit the policy and go to the following: User Config -> Preferences -> Win Settings -> Drive Maps Action: Update Location: \\AD-server\test-share Label as:

  Can you run on a failing computer : - netdom verify yourpcname - nslookup yourpcname All ok? And is time in sync?   Did you install winbind after the update and also and did you change you server services line?   Like, i use bind9 dns My smb.conf contains only this :        server services = -dns   The full line is :  samba-tool testparm -vv | grep "server service"