[PATCHES] GPO support for client machine policy

Andrew Bartlett abartlet at samba.org
Wed Dec 6 18:02:02 UTC 2017


On Wed, 2017-12-06 at 06:39 -0700, David Mulder wrote:
> Yes, they would run simultaneously, but they apply different things.
> They also run on different intervals.
> If you look at samba_gpoupdate where it sets gp_extensions, you'll see
> it sets the extensions to apply based on the type of apply (KDC, client
> machine, or user which isn't available yet).
> I had considered removing the KDC service, but I think it is fine as is.
> The way it is now, if they choose not to configure winbind, kdc policy
> is still applied. 

To be clear, winbindd is a mandatory part of the AD DC.

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba




More information about the samba-technical mailing list