Search results
From SambaWiki
Page title matches
- = LAM - LDAP Account Manager = LDAP Account Manager (LAM) is a web frontend for managing entries in an LDAP directory,717 bytes (104 words) - 20:24, 26 February 2017
- ...cial permissions in the AD. Per default, all members of the BuiltIn group "Account Operators" can do this job. So simply add the user/s who should be able do But the "Account Operators" group doesn't have permissions, that are required for doing all1 KB (165 words) - 21:48, 26 February 2017
Page text matches
- ...sing this way, you do not have to assign manually the setting to each user account. ...u to edit group policies, such as the AD domain <code>Administrator</code> account.2 KB (395 words) - 12:00, 16 November 2021
- Create an Administrator account on Samba: unlock account:2 KB (204 words) - 16:51, 21 November 2011
- ...ng this way, you do not have to set the redirection manually for each user account. ...u to edit group policies, such as the AD domain <code>Administrator</code> account.6 KB (913 words) - 07:35, 2 November 2021
- [[4.0: User Management]] On node1 login with root account; the ha.cf file needs to be the same on both nodes.1 KB (188 words) - 13:49, 25 January 2007
- # Use your system user account and password to log in. #Use your system user account and password to log in.10 KB (1,438 words) - 14:54, 20 August 2023
- [[4.0: User Management]] dn: cn=Account Operators,ou=Groups,dc=differentialdesign,dc=org5 KB (619 words) - 13:42, 25 January 2007
- = Setting attributes on an user account = * Right-click to a user account and choose properties.4 KB (649 words) - 19:55, 6 August 2019
- * Installed Group Policy Management Console. It is part of the [[Installing RSAT|Remote Server Administration T * Open the Group Policy Management Console8 KB (1,132 words) - 13:01, 16 November 2021
- ::<nowiki>**</nowiki> For details, see [[The SYSTEM Account]]. ...e>\\server\profiles\demo</code> as profile folder to the <code>demo</code> account:12 KB (1,951 words) - 12:20, 30 November 2023
- ...u to edit group policies, such as the AD domain <code>Administrator</code> account. * Open the <code>Group Policy Management Console</code>. If you are not having the Remote Server Administration Tool18 KB (2,757 words) - 09:53, 10 May 2024
- [[4.0. User Management]] ...ur initial control of the database and can lead to issues such as database management.22 KB (2,932 words) - 12:49, 14 March 2007
- [[4.0: User Management]] added: "cn=Account Operators,ou=Groups,dc=differentialdesign,dc=org" (00000011)4 KB (519 words) - 13:43, 25 January 2007
- * Create a <code>demoUser</code> account on the local system: ...if the user requires a home directory on this host. For Samba access, the account does not require a valid shell.9 KB (1,399 words) - 13:24, 3 February 2023
- [[4.0: User Management]] added: "cn=Account Operators,ou=Groups,dc=differentialdesign,dc=org" (00000011)5 KB (645 words) - 13:43, 25 January 2007
- :* [[Remote and local management of Samba]] ::* [[User and group management]]6 KB (791 words) - 17:26, 22 May 2023
- [[4.0. User Management]] == [[4.0. User Management]] ==19 KB (2,502 words) - 03:49, 19 September 2007
- ...ents which are needed for the accounts. Especially user, machine and group management. The real fortunate is that these tools can be set as scripts in smb.conf p ...gid. This is needed cause samba looks up those accounts like a normal user account.5 KB (780 words) - 19:40, 9 November 2018
- Group Policy provides centralized management and configuration of operating system, application, and user settings. Poli === Group Policy Management Editor ===24 KB (3,276 words) - 15:52, 6 December 2023
- ...to the Samba server Domain Controller. It should also take hierarchy into account and do this on a constant basis, and not just once when the program starts *Take hierarchy into account12 KB (2,069 words) - 08:30, 17 November 2021
- * Log on to a Windows host using an account that has the <code>SeDiskOperatorPrivilege</code> privilege granted. e.g. < * Click <code>Start</code>, enter <code>Computer Management</code>, and start the application.14 KB (2,101 words) - 14:37, 25 April 2024
- To use this feature to the full advantage, two hardening steps and then key management are required. By default encryption at rest is enabled. Even without key management (below) this avoids a number of in-memory attacks on our database by separa11 KB (1,748 words) - 23:48, 19 June 2023
- [[4.0. User Management]] On node1 login with root account; the ha.cf file needs to be the same on both nodes.7 KB (1,118 words) - 12:50, 12 March 2007
- [[Image:DC_PDC_emulator.png|thumb|Group Policy Management Console option for PDC]] ...s the FSMO role "PDC Emulator", because you can configure the Group Policy Management Console to connect only to this machine (default), instead of just choosing9 KB (1,094 words) - 18:26, 5 October 2021
- ...our Windows Server 2012 or 2012 installation using the local administrator account. ...join a domain controller (DC) to the domain, like the domain administrator account. Click <code>Next</code>.8 KB (1,195 words) - 08:27, 19 July 2023
- == Microsoft Management Console (MMC) == * SID from an object (e. g. a user, group or computer account) in the same domain: ''S-1-5-21-3134998938-619743855-3616620706''-112114 KB (2,228 words) - 21:06, 24 July 2014
- ...y disconnected. During this time, if a new security object, such as a user account, is created in both locations, they may get the same [[Terms_and_Abbreviati * Account lockouts are processed by the PDC Emulator.8 KB (1,354 words) - 14:56, 4 July 2019
- ...created in AD, and a new A record added to the DNS zone. This new computer account needs permission to create and modify computer objects in the AD computers # In fover-ad, open the Active Directory Users and Computers management tool10 KB (1,355 words) - 14:04, 11 November 2020
- ...u to edit group policies, such as the AD domain <code>Administrator</code> account. * Open the <code>Group Policy Management Console</code>. If you are not having the Remote Server Administration Tool16 KB (2,531 words) - 15:58, 27 October 2023
- = Process Management = Could not find machine account in secrets database: Failed to fetch machine account password for MYDOMAIN from both secrets.ldb (Could not find entry to match8 KB (1,174 words) - 10:32, 26 February 2023
- ====Group Managed service account client-side features==== samba-tool also allows the creation and management of authentication policies, which are rules about where a user may authenti14 KB (2,130 words) - 08:02, 10 May 2024
- ...to enable guest access. However, guest access is based on the <code>guest account</code> parameter, that is not implemented in the Samba AD mode. When you click in the Group Policy Management Console to a GPO, the following error is displayed:17 KB (2,768 words) - 13:42, 11 February 2022
- ...ever, the above limitation means that '''source routing is not taking into account'''. For most configurations this means that CTDB's TCP ACK/RST packets wil CTDB's management of public IP addresses can affect connectivity to infrastructure (e.g. DNS,9 KB (1,397 words) - 03:36, 6 December 2020
- ...those that supports tkey-gss updates, because parts of Samba (like the DNS management RPC server and the domain join) assume the replicated DNS entries in the AD To create a <code>named</code> account with UID <code>25</code>, primary group <code>named</code>, home directory11 KB (1,575 words) - 19:58, 1 November 2023
- ...and Administering of Group Policy Objects to be used for enterprise fleet management ...he AD databases and adds initial records, such as the domain administrator account and required DNS entries. Samba comes with a built in command lined tool ca29 KB (4,035 words) - 15:02, 8 May 2024
- ...Samba domain controller to map the certificate to an Active Directory user account. Again, make sure that only root (and the user account Samba is running as, if it is different) can access the private key file (w55 KB (8,205 words) - 14:19, 17 December 2022
- ...61 CVE-2019-14861]: Samba AD DC zone-named record Denial of Service in DNS management server (dnsserver). :An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name.76 KB (11,334 words) - 15:03, 3 March 2020
- * NetApi library implements various new calls for User- and Group Account Management.20 KB (2,917 words) - 21:09, 26 February 2017
- ...holds a Kerberos principal in the domain, and has a corresponding machine account in the directory that can be used to make or accept Kerberised network requ * GPO Group Policy Objects An overview of the Group Policy management system is described in [https://docs.microsoft.com/en-us/openspecs/windows_130 KB (20,385 words) - 02:43, 9 May 2024
- Additionally, management tools like net, samba-tool and rpcclient use DCERPC over SMB2/3 connections ...ctory object handles created on a connection created from an Administrator account and re-use them on the now non-privileged connection, compromising the secu76 KB (11,563 words) - 22:02, 17 September 2019
- ...-member-base-dn" option is added to relevant samba-tool user, group and ou management commands to allow operation on just one part of the AD tree, such as a sing ...LY flag for an account will cause Kerberos authentication to fail for that account (see RFC-6649).47 KB (7,093 words) - 15:21, 20 September 2021
- ...61 CVE-2019-14861]: Samba AD DC zone-named record Denial of Service in DNS management server (dnsserver). :An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name.63 KB (9,242 words) - 20:37, 22 September 2020
- Additionally, management tools like net, samba-tool and rpcclient use DCERPC over SMB2/3 connections ...ctory object handles created on a connection created from an Administrator account and re-use them on the now non-privileged connection, compromising the secu94 KB (14,313 words) - 22:03, 17 September 2019
- ...r is enabled, the free disk on a folder should take the owner's quota into account. Additionally, management tools like net, samba-tool and rpcclient use DCERPC over SMB2/3 connections78 KB (11,799 words) - 22:01, 17 September 2019
- :A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated ...6 or 4.0 these tdbs need to be migrated to our new registry based printing management. This means during the migration we also need to do charset conversion. Th41 KB (6,189 words) - 21:09, 26 February 2017
- ...61 CVE-2019-14861]: Samba AD DC zone-named record Denial of Service in DNS management server (dnsserver). :An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name.55 KB (8,076 words) - 14:14, 10 March 2021
- ...illa.samba.org/show_bug.cgi?id=9985 BUG #9985]: s3-libads: Add all machine account principals to the keytab. ...rg/show_bug.cgi?id=9091 bug #9091]: s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled.78 KB (11,609 words) - 22:05, 17 September 2019