similar to: Is a mixed MS/Samba DC environment doable?

On Wed, 2023-12-06 at 11:34 +0100, Anders ?stling via samba wrote: > Hi > I'd like to learn more on the pros and cons of a mixed domain that > consists > of both MS and Samba domain controllers and member servers. This is a situation that is meant to work, but is not actively tested (all our tests are pure Samba), but seems to work for some folks. However given the way Windows

Hi, Researched the forums before posting but was not able to find solution to my issue. Could be a unique problem. GPO's are not being applied to users and computers because 'RPC is unavailable'. The GPO's were being applied before, but not sure what happened. Started noticing this once I binded a new instance of Windows 10 to the SambaDC and the machine nor user were picking up

Somewhat Samba related, I ask this question (that might be over the line and into Windows territory) but, here I go . . . Of those user on this mailing list that manage Samba installs for various clients/customers, what are your most used GPO policies you have put into place for AD management? I ask because, when you venture over into Windows world and start reading posted articles about their

As per title, is it possible to export GPO's from one AD DC and import them into another, one on a different domain? Searching online, all posts refer to transferring GPO's between servers on the same domain, or restoring GPO's from backups when rebuilding a server. It is tedious to configure by hand 30-40 GPO's - it would save a lot of time if there was a way to just copy

Hello Samba-List, Recently I ran into a few access rights problems with GPO's. I have an test environment running with four samba4 AD DC's (sernet 4.1.2/debian wheezy). Used the Script's from the samba wiki for sysvol replication. The AD Database is comming from an classic upgrade and i have "idmap_ldb:use rfc2307 = yes" in my smb.conf. Some groups like for example

Hi Guys, I am trying to connect Windows 10 to Samba domain controller. Windows 10 fails to get GPO’s because it can’t access SysVol with permissions. The domain Windows 10 is going through for SysVol would be \\example.com\SysVol when I navigate to this as Admin it does not let me go with credentials however if I use the servers hostname \\voyager\Sysvol I can access the directory. We have a

I have upgraded Samba from a NT PDC to an AD DC about a week ago. Everything went pretty well until today. I've already configured about 25 GPO's (through RSAT on a Windows 10 machine) - but when I came to add more GPO's - it wouldn't let me with the above error message. My specs are: Samba 4.5.0 Slackware -current 64bit Kernel 4.4.20 The client machine is a Windows 10 Pro.

Hi, I am using samba 4.1.7 as Domain Controller. Actually I have two samba servers DC1 and DC2. DC1 is the primary DC and DC2 joined as another DC. We use the Active Directory for a couple of weeks. The directory replication works fine, and a sysvol replication works with rsync. (I set it up based on the samba wiki). But I have a problem with the authentication. If I log in to a windows

This is beacuse all workstations are windows, but we are thinking migrate to fedora. i already have all the users in samba DC. We access to internet and others apps with user from DC. because of that, we need both systems for now El lun., 14 ene. 2019 a las 18:23, Rowland Penny via samba (< samba at lists.samba.org>) escribió: > On Mon, 14 Jan 2019 17:57:26 -0300 > Carlos Bordon via

My main home server runs Fedora 25. I have experimented in the past with an Ubuntu samba AD domain controller(in a VM). Which was really cool because I could join Windows 10 pro machines to it and assign GPO's just like my AD at work. Currently I'm looking into setting up a FreeRadius server. I want to eventually be able to have the same authentication across machines and wifi and the lot.

I get this error when I run samba-tool ntacl sysvolcheck ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) There are two GPO directories. One is the Default Domain Controllers Policy and one is the Default Domain Policy It looks like it's the Default Domain Policy that's

On Tue, 6 Nov 2018 11:16:07 +0100 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > Il 05/11/2018 14:01, Rowland Penny via samba ha scritto: > > This is what I thought, so remove the libnss_winbind links from the > > DC, these are only required if you want to use your DC as a > > fileserver. > ok, but my gpo where are stored ?? > If i

Dear Rowland, > Just a thought, Do all the GPO's that exist in AD also exist in Sysvol > of the DC you are trying to backup ? Yes, I compared the Sysvol-Directories. They are synched correctly, all GPO's are exactly the same on both ADs. Best regards Bene -- forumZFD Entschieden für Frieden|Committed to Peace Benedikt Kaleß Leiter Team IT|Head team IT Forum Ziviler

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

> I think the 10.0.06 entry was created during domain creation. I'd skim > thru dns records from an windows machine if possible and delete all > occurences of unwanted ip adresses. I assume the gpo's still can not be > loaded during logon on the client? Did you inspect gpresult /h result.html? I did remove the record for 10.0.0.6 now. Currently I only have 10.0.1.6 in the DNS

The DC is a Ubuntu 16.04, with samba 4.8 I want a local user in alls workstations with admin permissions, is for the support area, for install apps and if i make a freeipa and make the trust? i could have the users and GPOs for windows and users and tools for linux, is possible? El lun., 14 ene. 2019 a las 17:26, Rowland Penny via samba (< samba at lists.samba.org>) escribió: > On

On 02/07/2018 05:01 AM, L.P.H. van Belle via samba wrote: > Hai, > > Ok, for the sysvol. > I'll put all steps here again. > > I suggest start with this one. > wget https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-set-sysvol.sh > This checks and set the rights to be known to be right. ( aka works great for me ) ;-) > Thanks, but before I run that

PS: I could share information about what should be modified to modify the very same GPO, I didn't yet as I'm not sure anyone there would be interested and because that would work only for that kind of GPO. 2016-07-06 17:08 GMT+02:00 mathias dufresne <infractory at gmail.com>: > Context: several teams have to manage only a a bunch of the company's > computers, so these

On 14/04/2023 15:51, Anderson Sampaio Mello via samba wrote: > Thanks everyone for the reply. > > But actually the samba documentation: > > https://wiki.samba.org/index.php/Group_Policy#SSSD > > and from David Mulder(dmulder): > > https://dmulder.github.io/group-policy-book/policy-refresh.html#sssd-refresh > > It makes it clear that sssd does support samba AD

Any event id for this one? If its event id : 1110. Open CMD box, type ipconfig /all And post the result. I suppect one of the following. 1) pc cloned without sysprep, so multiple pc's with same SID. 2) wrong DNS-Domain suffix 3) wrong DNS-Search suffix Test this by remove you pc from domain, add it again, reboot. Login with the same user. Greetz, Louis >