similar to: How to fix mapping Administrator to root

Thanks, Rowland , 'net cache flush' solved my problem. but I found that I can't access any share in \\myshare. some related configurations in my smb,conf .... access based share enum = yes hide unreadable = yes username map = /etc/samba/user.map I can't see any share folder of my fileserver in fsmgmt.msc. and I run "smbstatus -b" PID Username Group

Hi Rowland , I have followed the wiki's step, the DNS works OK and I have use the fileserver for 2 years. here's a share folder "IT"'s acl getfacl IT/ # file: IT/ # owner: root # group: domain\040admins user::rwx user:root:rwx group::rwx group:domain\040admins:rwx group:it:rwx mask::rwx other::--- default:user::rwx default:user:root:rwx default:group::---

On 05/06/2019 03:22, adam_xu--- via samba wrote: > Hi sambalist, > > I set up a new test environment to test the problem. still the same result. It seems that if I didn't give administrator a uidNumber in unix attributes and only map this user to root. it can manage the share folder in fsmgmt.msc, but after I remove everyone's share permission and add share permissions to >

Hi sambalist, I set up a new test environment to test the problem. still the same result. It seems that if I didn't give administrator a uidNumber in unix attributes and only map this user to root. it can manage the share folder in fsmgmt.msc, but after I remove everyone's share permission and add share permissions to domain admins full control domain users RW then, the administrator

On 05/06/2019 08:37, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > I used to manage file or folder permissions using administrator > account in Windows Client. So how could I do this task if the > administrator can't do this after I mapped it to root in fileserver > and remove it's uidNumber in ADUC? should I create another user in > Domain Adams"? >

Hi Rowland, I have checked that Adinistrator is a member of "Domain Admins" in ADUC. Base Permission of the share folder is 0770 and own is root and the groups is "domain admins" in linux. since "smbstatus -b" show that administrator's group is root. Is this related to my previous configuration? I once give a uidNumber to administrator. here's full contant

Hi Rowland , I used to manage file or folder permissions using administrator account in Windows Client. So how could I do this task if the administrator can't do this after I mapped it to root in fileserver and remove it's uidNumber in ADUC? should I create another user in Domain Adams"? Best, yours Adam From: Rowland penny via samba Date: 2019-06-05 15:13 To: samba Subject:

On 03/06/2019 10:09, adam_xu--- via samba wrote: > Hi sambalist, > > I'm using samba ad dc for about 2 years. I have 2 DCs and One file server. I didn't map the Administrator to root because the wiki said: > > "Mapping the domain administrator to the local root account is optional. Only configure the mapping if the domain administrator must be able to execute file

Hi Rowland, Yes. all users primary group is "domain users". my "domain admins" has a gidNumber. Best, yours Adam From: Rowland penny via samba Date: 2019-06-03 22:44 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 15:29, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > I have checked that Adinistrator is a member of

On 05/06/2019 09:08, adam_xu at adagene.com.cn wrote: > Hi Rowland, > >  I can manage the security permission, but I can't manage the share > permission after I remove the user "everyone"'s share permission and > add "domain admins" and "domain user" share permission. > Do you have any advice? > I take it you are referring to the

On 05/06/2019 09:26, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > English?is?not?my?native?language.It?seems?that?the?communication?between?us > was a?misunderstanding. what I want is just > "IGNORE?the?'share'?tab,?do?not?touch?it,?forget?it?is?there." > Thank?you?for?your?patience. > No problem, I sort of thought this was the case ;-) To be clear:

On 05/06/2019 09:51, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > In?some scenarios,?we?have?hundreds > of?shared?folders.?We?don't?want?users?to?see?too?many?folders,?so?we?configure?share?permissions?and?set > "hide unreadable = yes" in smb.conf. then users can only see the > folder that he or she has permissions. This?is?why?we?do something in >

Hi Rowland, I can manage the security permission, but I can't manage the share permission after I remove the user "everyone"'s share permission and add "domain admins" and "domain user" share permission. Do you have any advice? Best, yours Adam From: Rowland penny via samba Date: 2019-06-05 15:53 To: sambalist Subject: Re: [Samba] How to fix mapping

On 05/06/2019 10:18, adam_xu--- via samba wrote: > Hi , > > For example. I have a share service named "IT", I want only members in the IT team can see that share, members in other team can't even see the share. Then I would do this: > remove the user "everyone"'s share permission and add "domain admins" with full control and the ad group

Dear all I have install samba + ldap and it is successfully joing the domain but problem is when i login in XP machine with Administrator account of samba i cannot change anything in XP even not system time so is it problem of privileges ?? $ cat ~/satish/url.txt http://www.linuxbug.org

Hello, Rowland. what I set in RSAT is: nis domain "ntbaobei" uid "10000" login shell "/sbin/nologin" home dir "/home/Administrator" primary group "domain admins" I never used user map beacuse everything worked ok before. I knew the "root" user can granting the SeDiskOperatorPrivilege Privilege. Is there any changelog in samba 4.7.7 that

Hi Rowland , In some scenarios, we have hundreds of shared folders. We don't want users to see too many folders, so we configure share permissions and set "hide unreadable = yes" in smb.conf. then users can only see the folder that he or she has permissions. This is why we do something in "share" tab. Best, yours Adam From: Rowland penny via samba Date: 2019-06-05

Hi , For example. I have a share service named "IT", I want only members in the IT team can see that share, members in other team can't even see the share. Then I would do this: remove the user "everyone"'s share permission and add "domain admins" with full control and the ad group "it",with read and write permissions in "share" tab.

On 03/06/2019 15:29, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > I have checked that Adinistrator is a member of "Domain Admins" in ADUC. > Base Permission of the share folder is 0770 and  own is root  and the > groups is "domain admins" in linux. > since "smbstatus -b" show that administrator's group is root. Is this > related to my

Hello, everyone. After some windows 10 client join to our samba AD DC. A lot of setting is missing in the windows 10 PCs. so I need to import some windows 10 Administrative Templates to samba dc like that: https://support.microsoft.com/en-us/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra Unfortunately, I didn't see any dir named