[Samba] Windows 10 administrative templates /central store with Samba

[L.P.H. van Belle]

commented within.

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ole Traupe
> Verzonden: donderdag 21 januari 2016 16:47
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Windows 10 administrative templates /central store
> with Samba
> 
> Thanks, Louis, commented within.
> 
> On 21.01.2016 16:23, L.P.H. van Belle wrote:
> > Commented inbetween.
> >
> >> -----Oorspronkelijk bericht-----
> >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ole Traupe
> >> Verzonden: donderdag 21 januari 2016 15:40
> >> Aan: samba
> >> Onderwerp: [Samba] Windows 10 administrative templates /central store
> with
> >> Samba
> >>
> >> Hi list,
> >>
> >> This might or might not be a Samba related post. Feel free to ignore it
> >> in case it is too far off-topic
> >>
> >> My current understanding is that ...
> >> a) I need those new templates in order to fully integrate Win10 clients
> >> in an AD domain (i.e. with compatible policies).
> > [L.P.H. van Belle] http://trekker.net/archives/group-policy-downloads/
> >
> >> b) I can only modify policies based on Win10 admx files from Win10
> >> machines (i.e. with the RSAT tools for Win10).
> >   [L.P.H. van Belle] Dont know, still win7 here, i did a short test with
> win10, and i didnt had any problems managing this from a win7 pc.
> >
> >> Are there any Samba-related implications or issues on doing that,
> >> particularly if I follow the MS advice to store those admx files in a
> >> central store in the SYSVOL (\PolicyDefinitions) folder?
> > [L.P.H. van Belle] yes, and be sure to make good backups of that folder.
> >
> >> Also, are there any implications for existing domains with e.g. Win7
> >> clients? Is it advised to keep Win7 and Win10 in separate containers?
> > [L.P.H. van Belle] Nope, once you have win7 and add the win10 int the
> PolicyDefinitions you can use that also on win7.
> 
> Will the old templates auto-magically be used for Win7 and the new ones
> for Win10, or how is that working?
[L.P.H. van Belle] 
You make a copy of the win7 admx ( on the server  PolicyDefinitions ) 
Now add/overwrite the win10 admx files in that same folder.

! DO BACKUP THAT FOLDER ! 
I had some problems with admx files and then your very happy to have a backup of that. 

> 
> So it is not necessary to have separate containers (and policies) for
> Win7 vs. Win10? Ok, I remember seeing things like "This will have no
> effect on OS Windows Vista or newer." in the comments of Policy
> settings. This speaks for a smart integration.
[L.P.H. van Belle] nope, and yes your correct. 


> 
> 
> >
> >> I remember that somebody here reported issues with his/her existing
> >> Samba domain after having used the RSAT tools for Win10. But I am not
> >> able to find this post again. Does somebody remember or is able to tell
> >> how to avoid such (or other) trouble?
> > [L.P.H. van Belle] There where and maybe there still are a few problems
> with the policies, but i think windows had this fixed no.
> > If not, google the error message, solution is on the MS site, few small
> changes.
> 
> I particiularly remember that somebody claimed to have messed up his/her
> LDAP by managing the Samba domain from Win10. So this wouldn't have
> anything todo with Windows.
[L.P.H. van Belle] this i dont know, can recall that. 

> 
> 
> >
> >> Also, Viktor Trojanovic and Robert Watson reported the same error
> >> message on administering a domain from Win10 with RSAT in the midst of
> >> November. Have you been able to understand/solve it?
> > [L.P.H. van Belle] can answere this one, no win10 rsat tested.
> >> "Group Policy Management: A processing error occured collecting data
> >> using this base domain controller. Please change the base domain
> >> controller and try again."
> >>
> >> Ole
> >>
> >>
> >>
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >
> >
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba