[cifs-protocol] Meaning of 'RoleStandalone' in [MS-GPOL] 3.2.5.1.4 Site Search - TrackingID#2401050040009225

[Obaid Farooqi]

Hi David:
Please let me know (see below).

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

-----Original Message-----
From: Obaid Farooqi
Sent: Thursday, January 11, 2024 1:42 PM
To: David Mulder <dmulder at samba.org>
Cc: cifs-protocol at lists.samba.org; Andreas Schneider <asn at redhat.com>; Microsoft Support <supportmail at microsoft.com>
Subject: RE: Meaning of 'RoleStandalone' in [MS-GPOL] 3.2.5.1.4 Site Search - TrackingID#2401050040009225

Hi David:
The definition of 'DsRole_RoleStandaloneWorkstation' and 'DsRole_RoleStandaloneServer' (and others) is in MS-DSSP section 2.2.2.

Please review that and let me know if that information resolves your question. If it does not, please rephrase your question in the light of the information about the roles.

Although MS-DSSP is listed in the normative references in MS-GPOL, I'll file a bug to add a reference to section 2.2.2 of MS-DSSP in MS-GPOL for further clarity.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

-----Original Message-----
From: David Mulder <dmulder at samba.org>
Sent: Friday, January 5, 2024 9:47 AM
To: Interoperability Documentation Help <dochelp at microsoft.com>
Cc: cifs-protocol at lists.samba.org; Andreas Schneider <asn at redhat.com>
Subject: [EXTERNAL] Meaning of 'RoleStandalone' in [MS-GPOL] 3.2.5.1.4 Site Search

In [MS-GPOL] 3.2.5.1.4 Site Search, the document says: "This procedure is skipped if Machine Role is equal to DsRole_RoleStandaloneWorkstation or DsRole_RoleStandaloneServer."

First off, what do the roles 'DsRole_RoleStandaloneWorkstation' and 'DsRole_RoleStandaloneServer' refer to? Is it saying only perform these steps for an ADDC? Or does it mean skip this if the machine isn't joined to a domain? It isn't clear what these roles mean.

Second, it says if the method returns ERROR_NO_SITENAME to continue the GPO search. The server is responding with INVALID_COMPUTERNAME, not ERROR_NO_SITENAME. Perhaps this is because we were supposed to skip the search due to the 'skip' message at the top of 3.2.5.1.4? Or were we supposed to make this site name request, and the server is responding incorrectly?

--
David Mulder
Labs Software Engineer, Samba
SUSE
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at suse.com
http://www.suse.com/