similar to: Profiles directory permssions

I've got roaming profiles for one account on a Debian/Jessie AD DC server but I can't get them to work for the other accounts. The differences are that the one account is also a Linux account in the AD DC and is in the Domain Admins group. The other accounts were created with ADUC on a Windows 7 machine logged in as the Domain Admins user just mentioned. They are Domain Users but not

Hi bob, Yes, i have corrected the script online. I replaced the %USERNAME with %U in the old member script, and please dont give the user DOMAIN\Administrator any uid. not 0, nothing.. .no uid.. My best advice, leave Administrator as is and create a new user.. Add that one in "Domain Admins" and that user can have a uid. For setting the rights. Use setfacl to set the base

On 03/07/15 17:45, Gary Dale wrote: > On 03/07/15 02:44 AM, Gary Dale wrote: >> I've got roaming profiles for one account on a Debian/Jessie AD DC >> server but I can't get them to work for the other accounts. The >> differences are that the one account is also a Linux account in the >> AD DC and is in the Domain Admins group. The other accounts were >>

Rowland, I have tried your various alteration suggestions and it is a "negative" result. Here is the output from wbinfo -u & wbinfo -g root at dtmbr01:~# wbinfo -u administrator dns-dtdc02 dns-dtdc01 krbtgt guest root at dtmbr01:~# wbinfo -g allowed rodc password replication group enterprise read-only domain controllers denied rodc password replication group read-only domain

On 04/07/15 00:58, Gary Dale wrote: > On 03/07/15 01:21 PM, Rowland Penny wrote: >> On 03/07/15 17:45, Gary Dale wrote: >>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>> server but I can't get them to work for the other accounts. The >>>> differences are that the

I've performed a *successful* domain migration from S3/LDAPSAM to S4.0.0. Yay! I can browse and connect to the server from a workstation [logged in as a local account]. DNS looks good. kinit & klist work. I was able to *add* a workstation to the domain. But I can't get roaming profiles to work. On the server the roaming profile looks like - [profiles] path =

On 04/07/15 18:51, Gary Dale wrote: > On 04/07/15 04:22 AM, Rowland Penny wrote: >> On 04/07/15 00:58, Gary Dale wrote: >>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>> On 03/07/15 17:45, Gary Dale wrote: >>>>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>>>> I've got roaming profiles for one account on a Debian/Jessie AD

Gentlemen, First, let me point out that sometimes (and sometimes not) the mailing list will strip out some backslash marks in cut and paste. So, if there is a backslash missing . . . well, ignore that missing mark. Louis, When your script runs it creates the following default permissions: root at mbr01:~# ls -alh /home/samba/TEST/profiles total 8.0K drwxr-xr-t 2 root root 4.0K Feb 21 18:39

Okay, so I did this to myself. I overlooked an important sentence on the "https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles". The sentence that instructs to do "Profile share using Windows ACLs" ***OR*** "Profile share with using POSIX ACLs". So, I have reset the permissions to how they were before I messed them up doing the "POSIX ACLs" part.

On 10/04/2020 21:25, Alex MacCuish via samba wrote: > The way I do it, I create the home folder share on the server and set > the required ACLs as in the wiki. Then I fill in the field in the ADUC > Pane, Profile Path. Then I click ok. At that point, ADUC should open a > connection to the share, create the new folder, set the acl correctly > and then change the ownership. Hang

On my test system I can only get 'getent -V' to respond. Member server smb.conf file: root at mbr01:~# cat /etc/samba/smb.conf [global] workgroup = TEST security = ADS realm = TEST.BOB netbios name = mbr01 domain master = no host msdfs = no dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab client signing = if_required ## map id's outside to

On 03/07/15 07:58 PM, Gary Dale wrote: > On 03/07/15 01:21 PM, Rowland Penny wrote: >> On 03/07/15 17:45, Gary Dale wrote: >>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>> server but I can't get them to work for the other accounts. The >>>> differences are that the

Hello, After joining Windows 7 to a Samba 4 (AD), when logging on I experience 'Access denied' error accessing user profile. As a result, Windows creates temporary profile for the domain user (the profile is deleted upon logoff). The roaming profiles directory has been created according to instructions in https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles Note: the home

On 10/03/15 11:48, Bob of Donelson Trophy wrote: > > > Okay, so I tried a "Bob thing" and it made no difference. So, no comment > on that. However, I am learning. > > This is 'wbinfo -*' from my DC1: > > root at tdc01:~# wbinfo -u > Administrator > Guest > krbtgt > dns-tdc01 > dns-TDC02 > root at tdc01:~# wbinfo -g > Enterprise

Rowland, I think you have confused my email with a different thread. Uhm . . what? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-29 07:30, Rowland Penny wrote: > On 29/01/15 12:54, Bob of Donelson Trophy wrote: > Rowland, I have tried your various alteration

On 04/07/15 22:53, Gary Dale wrote: > On 04/07/15 02:37 PM, Rowland Penny wrote: >> On 04/07/15 18:51, Gary Dale wrote: >>> On 04/07/15 04:22 AM, Rowland Penny wrote: >>>> On 04/07/15 00:58, Gary Dale wrote: >>>>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>>>> On 03/07/15 17:45, Gary Dale wrote: >>>>>>> On

I've created a folder for roaming profiles: [profiles] comment = Network Profiles Share path = /srv/samba/profiles browseable = No store dos attributes = Yes csc policy = disable map acl inherit = Yes read only = No vfs objects = acl_xattr Share permission and folder permission seems right, exactly as in: https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles I've

On Tue, 28 Nov 2023 16:00:22 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > In a fresh samba AD domain i'm setting up the 'Profiles' share for > roaming profiles, following the wiki: > > https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > >

On 30/01/15 18:28, Bob of Donelson Trophy wrote: > > > After restoring the member server and re-running the improved > "4-setup-samba4-MEMBER-wheezy.sh" script I am still having the same > issue. W7 client still not allowed to access the member server. > > Administrator still has a uidNumber: > > getent passwd Administrator >

Ok, these : > For Administrator / Domain Admins / System / Creator Owner = Full > Control on folder, subfolders and files Are not available on the "Share security" but are on the "Security" So the "Share security settings" need only. Everyone FULL CONTROLL ( or Verified users ) And i think your done. > For Administrator / Domain Admins / System /