similar to: Policies for AD clients (still poledit only ?).

So only for old NT4 style PDC - BDC environment one needs poledit. While AD's (with virtual pdc role servers) can use the MMC.? We got a pure Samba AD environment and thus it should work. Be it that we might not have all mmc templates (not yet checked that). Thanks Viktor. -----Original message----- From: Viktor Trojanovic?<viktor at troja.ch> Sent: Wednesday 21st October 2020

On 10/21/20 5:44 AM, Peter Boos via samba wrote: > So only for old NT4 style PDC - BDC environment one needs poledit. Even if you are running an NT4 domain and manage a recent Windows client to join it, poledit based policies never applied to them, IIRC since Windows Vista (or 7) even that NT4 domains still worked at launch, the policies were ignored. > > While AD's (with

Hi samba gurus, I have a successful install of samba/LDAP (on FC5) and am looking at applying security templates for different groups. I had this successfully working on my old RH9 box running samba (but not using LDAP). Using poledit, I created groups (sales, it, etc) that were the same as my linux groups, and created a Ntconfig.POL file. Referring to this article for use on poledit.exe and

Am going thru the learning curve on using samba as a primary controller. Samba is up and running just fine. However, I'm a bit confused on the ntlogin.pol thing. I'm gathering, if all the workstations are winxp, I need to do this?? "Go to the Windows 200x/XP menu Start->Programs->Administrative Tools and select the MMC snap-in called Active Directory Users and Computers

Hello all, I've been trying to figure out what the best way of doing the group policy thing is. We are running samba 3 on slackware 9 with winxp clients. We are a school. i'm unclear on how much AD is actually supported... OU GPO all that. so i decided to go the "administrative template" way (used to be .pol files) I'm thinking of having the students run off of a

I've been reading about policies and the documentation says to grab poledit.exe from the NT SP6a file. There are many policy settings that are not available via this tool. Isn't there something newer that could be used to create the .pol file needed by samba to implement policies? Or will this only be available with samba4?

On 20/10/2020 16:55, Stefano Vargiu via samba wrote: > Hello everyone, > > can someone please tell me if the configuration previously shown is > eventually going to work? > No. Active directory doesn't like multi-homed computers. You will be better off removing the extra network devices from your DC's, so they only have one IP. Then set up a Unix domain member and use

i am using samba 3.0.14a as recommended but it seems that for some reason that i can't understand, no domain groups show up on any administration tool like poledit and nitrobit policy editor groups like users (domain not local) and ntadmins where are they Thanks Nikos Sarantopoulos --------------------------------- ?????????????? Yahoo! ?????????? ?? ?????????? ???? ????

On 20/10/2020 22:09, Stefano Vargiu via samba wrote: > I didn't know the concept of site in AD: thank you for pointing that out to > me, I'll read about it. > I'm also going to avoid the same subnets on the two sites, but honestly > I'll try to keep the multi-homed configuration because I always used it (at > least in single master configurations), always worked and

On 20/10/2020 17:46, Stefano Vargiu wrote: > Sorry, I don't get it. > > You?mean a domain member as opposed to a domain controller? > In which way is it?going?to help? > You should really only use a Samba AD DC for authentication, so the best idea would be to add a Unix domain member to the domain and install openvpn or freeradius or some other program that will do what you

I add some additional information I didn't give in my previous email, specifically how I tried to force DC1 and DC2 to contact each other only with their VPN IPs. I did so using dnsmasq as a DNS proxy. # DC1 configuration IP NIC1: 172.16.0.2 IP NIC2: 172.20.0.1 IP VPN: 172.19.1.173 --- /etc/resolv.conf: search domain.local domain domain.local nameserver 172.19.1.173 --- I configured dnsmasq

On 20/10/2020 19:56, Christian Naumer via samba wrote: > > Am 20.10.20 um 19:36 schrieb Rowland penny via samba: >> On 20/10/2020 17:46, Stefano Vargiu wrote: >>> Sorry, I don't get it. >>> >>> You?mean a domain member as opposed to a domain controller? >>> In which way is it?going?to help? >>> >> You should really only use a Samba

Hello all. I'm in the process of getting roaming profiles up and running on a RH 7.3 installation, running as a PDC on an 'NT Domain'. I've been reading the PROFILES.txt, and need to clear some things up. Do the rules that apply for WinNT, apply to Win2000, specifically the NTConfig.Pol file. If it does, I can't find it on either the samba server or the Win2000 machine,

Hi everybody, I'm playing with the new Improved KCC of samba 4.3.X Here is my network's topology : - DC : smb4dc located on Default-First-site-Name - DC : dc110 located on PetitQuevilly - DC : dc113 located on SaintEtienne - DC : dc120 located on Barentin - Etc.... (total of 15 DC) I want smb4dc acting as a bridge head for all others

Is possible to store the Group Policy Container (GPC) on a OpenLDAP? Is possible to store the Group Policy Template (GPT) on a Samba share? The idea is to manage windows desktop policies using the new Win200x GPOs without using an Active Directory. Any other hints? Thanks --------------------- Gabriel Acquistapace CaFeLUG (Capital Federal GNU/Linux User Group) Buenos Aires, Argentina

Any possibility to apply policies on WinXP machines using samba 3.2.3 ? In samba documentation in : http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/PolicyMgmt.html There is references to apply policies in NT/2000 Server and winxp clients, but it's not clear to me that will run fine or not using samba 3.2.3+winxp machines. If exist a way, How ? I was create a local policies using

On Tue, 2017-12-19 at 11:00 +0100, Gaetan SLONGO wrote: > Hi Andrew, > > Thank you for your answer. The issue is in the source or destination ? > Because meanwhile I noticed the destination server was on 4.6.11 and not 4.7.3 as the source. What do you think about it ? Update the destination to 4.7.4 when this is released in a few days. I hope this helps, Andrew Bartlett -- Andrew

You can set the type of Profile by using the control Panal system application to set the type to local. Anyway this is probably not the main intention in handling profiles: Aim: 1. Exclude some files like tmp or temporary internet file 2. Include desktop or personal Therefore you can use (to exclude) the poledit: double click on the user in poledit and as far as I remember under

Hello, I've having recurring issues with the second DC in my Samba AD domain. I've demoted/removed the second DC a number of times and re-provisioned it. It'll work for a bit and then replication breaks. Since replication is broken I've been doing the following to remove it: DC-02 systemctl stop samba systemctl disable samba DC-01 samba-tool domain demote

I've googled my brains out trying to find the "latest" NT 4.0 System Policy Editor files: POLEDIT.CNT POLEDIT.EXE POLEDIT.HLP COMMON.ADM (NT & W9x) WINNT.ADM (NT) WINDOWS.ADM (W9x) I only have dialup access, and it will take me a zillion days to download SP6 for NT so I can extract the above files. Can any one point me to where I can D/L those six (or 0110) files? Thanks