[Samba] Managing Samba Active directory.

[Steve Ankeny]

You can install the ADUC tools on Windows 7, and running it as a VM is a 
good idea.

On 05/05/2015 10:11 AM, Sketch wrote:
> Great summary from Luke, but I would add a couple of things:
>
>> A combination of the samba-tool command and pdbedit can achieve most 
>> things...Our internal documentation also says you need to use the 
>> ADUC tools to add UNIX Attributes to a Security Group. There might be 
>> a way to do it on the command line but none of us have seemed to have 
>> bothered to figure it out :-)
>
> I though pdbedit was only for non-active directory setups? However, 
> it's easy to add attributes to a user manually with ldbedit or via 
> script with ldbmodify.  There are also samba-tool options to add most 
> of the common ones at user creation time.  See "samba-tool user add 
> --help".
>
>> I would recommend a single Windows Server (2012) with the ADUC tools 
>> installed for management (you could probably get by with Win8.1 but 
>> Server is less "graphical").
>
> I would recommend not wasting your money on Windows Server, as the 
> ADUC tools are identical between server and desktop versions of windows.