similar to: recommendations for new AD with samba as backup DC

Hi you don't need a Windows-DC it's much better and easier if you set up both DCs with the same OS. 4.19 comes with FL 2016 (if you need it). The GPOs work absolutely the same as with a windows DC. You can use RSAT to do it. Stefan Am 19.01.24 um 22:07 schrieb Mikel P?rez via samba: > I'm about to deploy a new directory since I had only one Windows > Server 2019 DC and its

Hi all, I am currently struggling with an odd MS Remote Desktop issue which might be related to our Samba4 AD (version: 4.2.0pre1-GIT-d7c22d5 domain/forest-level 2008_R2) setup. We are unable to connect to Win7 machines (all available latest patches installed) via RDP after they have been joined to the domain. We have made sure, that RDP is enabled and the firewall exceptions are in place. We

One more i found is : http://www.edugeek.net/forums/windows-7/145171-event-id-1053-group-policy.html But i dont expect that to be your problem, just do checkit. And review these steps https://www.dell.com/support/article/nl/nl/nldhs1/sln163816/troubleshooting-group-policy-processing-errors-in-an-active-directory-domain?lang=en I can type it all, but then you get more typo's ;-) Above

On Sun, 10 Feb 2019 at 17:42, Rowland Penny via samba <samba at lists.samba.org> wrote: > > > The problem is that a Samba AD DC is constantly in flux, that is, it > changes constantly, if your 'snapshot' can guarantee it is correct, > then I see no problem, but you would only really know when you tried > to restore it. > > >With regards to information

On Mon, 2 Jul 2018 09:49:52 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 2018-07-01 um 15:56 schrieb Stefan G. Weichinger via samba: > > Am 01.07.2018 um 11:04 schrieb Rowland Penny via samba: > > > >> Do you have access to the Windows DC ? > >> If so, can you check if the computer (u1customer) has the required

On Mon, 2 Jul 2018 10:37:56 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2018-07-02 um 10:32 schrieb Rowland Penny: > > On Mon, 2 Jul 2018 09:49:52 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> The message re-appeared though: > >> > >> gss_accept_sec_context failed with

On Sun, 10 Feb 2019 at 19:52, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 10 Feb 2019 19:33:17 +0100 > Viktor Trojanovic <viktor at troja.ch> wrote: > > > On Sun, 10 Feb 2019 at 17:42, Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > > > > > > > > The problem is that a Samba AD DC

On Sat, Dec 20, 2014 at 4:15 PM, Tim <rintimtim at gmx.net> wrote: > Then I would do it with a group policy. Have a look right here: > http://technet.microsoft.com/en-us/library/ee791928(v=WS.10).aspx > > Remind that you leave the default policies untouched. Create a new GPo and > link it to your desired OU. > After put domain users in the remote destop group in the DC,

Has anyone found a workaround for Samba print servers? https://social.technet.microsoft.com/Forums/en-US/030ee94a-047d-460a-bc39-52351a199364/kb31639 12-breaks-point-and-print-restrictions-gpo-settings If I set the GPOs as stated on the WIKI (https://wiki.samba.org/index.php/Setting_up_Automatic _Printer_Driver_Downloads_for_Windows_Clients) Windows 10 refuses to install the driver with "a

ok, do the following. set ignore systemacl to yes on sysvol and netlogon. login as dom\administrator computer manager, connect to dc. share sysvol, goto share security, reset to defalts. same for folder. goto gpo manager, klik on every gpo object, if one has wrong acl, you get a message to reset it, thats ok. now never samba-tool sysvol reset if you do, you might need to set share/file

Thanks a lot Ingo, Rowland and Luis! [...] INFO 2024-05-08 12:33:25,196 pid:2355 /usr/lib/python3/dist-packages/samba/join.py #1324: Sending DsReplicaUpdateRefs for all the replicated partitions INFO 2024-05-08 12:33:25,261 pid:2355 /usr/lib/python3/dist-packages/samba/join.py #1354: Setting isSynchronized and dsServiceName INFO 2024-05-08 12:33:25,281 pid:2355

On Tue, 6 Feb 2018 15:03:16 -0400 Robert Marcano via samba <samba at lists.samba.org> wrote: > Thanks for the information, to use a default GPO was a simple way to > try to encourage someone to reproduce the problem. > > I already created new GPOs (this is a test domain) Using the default > filter for a new GPO, "Authenticated users", creating a new group for

On Sun, 10 Feb 2019 at 20:23, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 10 Feb 2019 20:11:02 +0100 > Viktor Trojanovic <viktor at troja.ch> wrote: > > > On Sun, 10 Feb 2019 at 19:52, Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > > On Sun, 10 Feb 2019 19:33:17 +0100 > > > Viktor

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

> On 04 Jun 2016, at 22:14, Miguel Medalha <medalist at sapo.pt> wrote: > > >> Can someone therefore please explain to me what exactly these GPO >> restrictions are that Samba can't handle? I'd also appreciate if someone >> could list which other GPO I cannot set successfully using RSAT. > > It seems to me that the FAQ is pretty clear. The

Hello, I'm trying to automate the creation of several small samba AD DCs, each with a different domain. Samba tool works fine for creating a brand new domain, but I haven't seen any functionality for manipulating the directory structure of a new domain. Specifically, I'd like to automate the creation of a standard set of OUs, security groups and GPOs. I'm wondering whether

GPOs are not synchronized, because I'm going to delete the zentyal domain, how can I delete delete all GPOs from AD y sysvol? and start over [root at srv-cds ~]# samba-tool gpo del {31B2F340-016D-11D2-945F-00C04FB984F9} GPO {31B2F340-016D-11D2-945F-00C04FB984F9} is linked to containers ERROR(ldb): Error removing GPO from container - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - El

Who am I to say this? I am only a lowly user and would-be admin, but it seems to me that one of the most useful features of an AD environment, GPOs, is not fully trust-able under Samba because of instability and ensuing fear, before and after each update, related to sysvol and who knows what. I still love you, though.

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H

Am 03.06.19 um 12:08 schrieb Rowland penny via samba: > On 03/06/2019 10:58, Stefan G. Weichinger via samba wrote: >> Am 03.06.19 um 11:40 schrieb Rowland penny via samba: >>> On 03/06/2019 10:22, Stefan G. Weichinger via samba wrote: >>>> samba-4.8.12 on 2 DCs, replication works ... >>>> >>>> An external admin joined a new PC and the GPOs