[Samba] domain users "primary­ gro­up" does not take ef­fect ­in UNIX attributes

[L.P.H. van Belle]

Have a look at : 

http://msdn.microsoft.com/en-us/library/bb727067.aspx

and..  
>Why should the computer
>account takes a role in security settings

how about applie-ing GPO policies/ installing software before 
a user logs in. ( Computer policies ) 


Louis


>-----Oorspronkelijk bericht-----
>Van: micromegas at mail333.com 
>[mailto:samba-bounces at lists.samba.org] Namens ?icro MEGAS
>Verzonden: donderdag 30 oktober 2014 9:29
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] domain users "primary­ gro­up" does not 
>take ef­fect ­in UNIX attributes
>
>> In the above example, you computer account cannot access the share. 
>> the computer is not in "Domain Admin" "Domain Users" or SYSTEM.
>> BUT 
>> 
>> Your computer account is a member of "Authenicated users" 
>> thats the only explanation im having, if its right.. no
>> The first example should work also imo, but it does not. 
>> 
>> Louis
>
>Hmmm...doesn't make sense to me to be honest. Why should the computer
>account takes a role in security settings? The computer account is
>necessary to authenticate at my domain so my domain AD controller
>recognizes it as authenticated member of the domain. Just in 
>my opinion,
>but maybe I'm wrong. But back to topic: I thinked about it and maybe
>following explanation is the correct one:
>
>As I am using "johndoe", "foo" or "bar" these user names are mapped to
>the unix account "root". That does mean, that Windows or Samba 
>*only see*
>the user "root". Windows/Samba don't mind if the user "johndoe", "foo"
>or "bar" initially logged it, it sees them just as "Unix/root". And so
>this user account is not a member of "Domain Users", "Domain Admins" or
>anyone else, but it's recognized with "authenticated users" because
>the windows client did authenticate once against the samba4 ad dc.
>
>That's a possibly explanation, but I am not sure if it's correct. If
>anyone knows better, please help us and throw some light in 
>the darkness.
>
>Mirco
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>