[Samba] Problem to change values with ldbedit if primary group is 512 (Domain Admins) Von Rowland Penny

[holgi]

Hi Rowland,
thanks for your reply. will update it, fair one.
I need to double check why those accounts are in the Admin group and try 
to change that.

take care
Holgi

> Dear samba community,
> I wanted to delete roaming profiles for some users with ldbedit
> according to the wiki
> https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles#Using_ldbedit_on_a_Domain_Controller
> 
> It works well for every user being in 513 (Domain Users) as
> primaryGroup. Some of our users have 512 as primaryGID. For those I'm
> not able to change any value with ldbedit.
> I always get the following error:
> 
> failed to add CN=(xyz01) NameX,CN=Users,DC=domain,DC=local - The
> primary group isn't settable on add operations!
> 
> Does one of you have any idea how to get around this issue?
> 
> Running Samba Version 4.15.13-Ubuntu
> 
>> My suggestion would be to first upgrade Samba (if possible), 4.15.x
>> is no longer supported by Samba, then put everyone's Primary group ID
>> back to Domain Users, I can see no reason to set any users primary
>> group ID to Domain Admins, why did you do this ?
>> 
>> Rowland