similar to: Is there a good web interface now to manage Samba?

Hello, I'm trying to automate the creation of several small samba AD DCs, each with a different domain. Samba tool works fine for creating a brand new domain, but I haven't seen any functionality for manipulating the directory structure of a new domain. Specifically, I'd like to automate the creation of a standard set of OUs, security groups and GPOs. I'm wondering whether

Hi, Our Domain controller environment is working for over 6 years without a break. It started with Samba Version 4.6.5 and today running 4.18.5. We have only Windows 10 clients across our organisation. Off late, we have observed that GPOs are not getting updated when we change some GPOs and link them to some specific OUs. For example, previously, we had not allowed one specific network path

And how can I use these gpos?  I need to configure a gpo that pevent student login in each administrative machine?  Citando Waishon <waishon009 at gmail.com>: > Hi, >   > I would use one domain and some groups. So you put your Students > in the "students" group and the administratives in the "admin". >   > Then simply create two OUs, one for

On Tue, 6 Feb 2018 15:03:16 -0400 Robert Marcano via samba <samba at lists.samba.org> wrote: > Thanks for the information, to use a default GPO was a simple way to > try to encourage someone to reproduce the problem. > > I already created new GPOs (this is a test domain) Using the default > filter for a new GPO, "Authenticated users", creating a new group for

On 8/10/23 8:48 PM, Anantha Raghava H A via samba wrote: > Hi, > > Our Domain controller environment is working for over 6 years without > a break. It started with Samba Version 4.6.5 and today running 4.18.5. > We have only Windows 10 clients across our organisation. > > Off late, we have observed that GPOs are not getting updated when we > change some GPOs and link

Am 03.11.2015 um 16:43 schrieb James: > Not possible. It's a container and not a OU. Right. However Roel, you can create an OU for your users/computers and redirect the standard to them: https://support.microsoft.com/en-us/kb/324949 Then you can have sub-OUs, link GPOs to them, etc. and ignore cn=Users/cn=Computer. Regards, Marc

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

Hi all, When created through RSAT OUs receive, by default, ACLs to refuse removal. When created through LDIF and ldbadd OUs do not receive these ACLs. Is there a way to create these ACLs using command line tools? Cheers, mathias

People: I have not solved my problem. I have only one DC with Zentyal 3.4 and I want to change it by samba 4.1.16. That's why if I can't join the samba to the existing domain I would not do anything else. The samba server error is this: (Command from samba) samba-tool domain join dtcf.etecsa.cu DC -U administrator --realm=DTCF.ETECSA.CU --dns-backend=BIND9_DLZ (Response) No

ok, do the following. set ignore systemacl to yes on sysvol and netlogon. login as dom\administrator computer manager, connect to dc. share sysvol, goto share security, reset to defalts. same for folder. goto gpo manager, klik on every gpo object, if one has wrong acl, you get a message to reset it, thats ok. now never samba-tool sysvol reset if you do, you might need to set share/file

Am 18.12.2019 17:18 schrieb Rowland penny via samba: > I would start with a new domain. Your computers will need to leave the > old domain and then join the new one, this will probably have to be > done manually Maybe something can be automated with Powershell: https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.management/add-computer > (just a question here,

Hi, I'm new to samba and I need help in how to setup this: ​I have 2 networks: Academic and Administrative ​I have 2 kind of users: Students and Administratives ​What I need is this:  ​Students can only login in the Academic network ​Administratives need to login in both networks ​I think about make 2 domais and put the academic machines in the academic domain and the administrative

Hi Andrew and Louis, Found the issue: after rsync-ing the sysvol from our old decommissioned DCs, the sysvolreset/sysvolcheck DO work out. I tried to keep the things simple first, by NOT immediately importing our old sysvol contents, but first check with a default sysvol... I thought that the sysvolreset would just reset whatever is located under samba/sysvol, but I guess that it reads the

No, I got the same result. On 02/09/2015 04:16 PM, Rowland Penny wrote: > > On 09/02/15 20:41, Denis Morejon Lopez wrote: >> >> Hi people: >> >> I can't join a second samba 4.1.16 domain controller to an existing >> domain. This domain just contain a DC based on Zentyal 3.4. >> >> When I try this from the samba server: >> >>

On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: > On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >> Hello, >> >> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >> Kerberos (clean, not upgraded). I just wan to create/activating a >> simple GPOs. >> >> # Interactive logon: Do not require CTRL + ALT + DEL -> activate

Hi everyone, I have a Samba 4.2.4 AD which works fine. I'm using Windows RSAT and I'm trying to create an OU under ou=Users, but this is not allowed. I can create OU's in the top DN, but not under ou=Users. Could this be a permissions problem or is this simply not possible or allowed? Thanks a lot, Roel

Hello, I set up a new AD with the Sernet Samba 4.1 packages. I did the provisioning with "samba-tool domain provision --use-rfc2307 --interactive". I checked the dc, ldap, kerberos and dns services under linux. Everything seems to work fine. Then I join a Windows 8.1 Enterprise running in as VM to the domain and login as administrator of the domain. When I install the RSAT and try

I need to create a couple of OUs under Users to separate my internal users from my external users that have LDAP backed accounts so I can put ACLs over the external users so I can limit what they can see on the tree. What options do I have to create the OUs and the ACLs in a Samba4 AD-DC domain?

On Tue, 31 Jul 2018 07:37:38 -0500 Denis Morejon via samba <samba at lists.samba.org> wrote: > Hi: > > I have two samba 4.7.4 DCs. One of them has problems. I can not use > samba-tool on it. Then, when I try to fix It's database It returns: > > ------------------------------------------------------------------------------------------------------------------- >

Ok, so yesterday it worked. Can you run this for me and mail me the output, i have a quick check. https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh And https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-db-repl.sh Last, have you check for corrupted filesystem and/or file/folders? Any updates done last days? Now maybe, just maybe, and this