[Samba] disable logons for all users but Domain Admin?

Stefan Dengscherz stefan.dengscherz at gmail.com
Mon Mar 2 17:35:21 GMT 2009


Hello Tomasz,


you can easily modify Samba LDAP users through a script with the
smbldap-tools (http://linux.die.net/man/8/smbldap-usermod in this
particular case).


Regards

2009/3/2 Tomasz Chmielewski <mangoo at wpkg.org>:
> Tomasz Chmielewski schrieb:
>>
>> Is it possible to disable domain logons for all users but Domain Admins?
>
> Seems like setting "L" in sambaAcctFlags does the job.
>
> The problem is how to do it globally ;)
>
> I exported users from LDAP and added "L" flag to all User accounts, but
> Administrator. Then, deleted users and imported the changed ldif.
>
>
> --
> Tomasz Chmielewski
> http://wpkg.org
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>



-- 
The box said Windows Vista or better. So I bought a Mac.


More information about the samba mailing list