[Samba] LAM (ldap acc manager) with samba4

L.P.H. van Belle belle at bazuin.nl
Wed Oct 15 07:31:30 MDT 2014


And, what i forgot to mention. 

If you have win 7 and win 8.(x) 
always use the highest windows to with rats.  
in case of setting up GPO and you dont want to miss some policies.

Louis

>-----Oorspronkelijk bericht-----
>Van: belle at bazuin.nl [mailto:samba-bounces at lists.samba.org] 
>Namens L.P.H. van Belle
>Verzonden: woensdag 15 oktober 2014 15:29
>Aan: ???????????? ??????????????????
>CC: samba at lists.samba.org
>Onderwerp: Re: [Samba] LAM (ldap acc manager) with samba4
>
>For rats.. 
>
>The computer must be joined in the domain.
>The user must have "Domain Admin" rights. ( or use 
>DOMAIN\Administrator )  
>and you need to set the privileges on the server for the group/user
>This needs to be done on all DC and/or member servers
>
>I give "Domain Admins" all rights. 
>like this. 
>
>SETNTPASSWD="YOURpassWord!" 
>
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeDiskOperatorPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeTakeOwnershipPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeBackupPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeRestorePrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeRemoteShutdownPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SePrintOperatorPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeAddUsersPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeDiskOperatorPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeSecurityPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeSystemtimePrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeShutdownPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeDebugPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeSystemEnvironmentPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeSystemProfilePrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeProfileSingleProcessPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeIncreaseBasePriorityPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeLoadDriverPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeCreatePagefilePrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeIncreaseQuotaPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeChangeNotifyPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeUndockPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeManageVolumePrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeImpersonatePrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeCreateGlobalPrivilege -UAdministrator
>echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain 
>Admins" SeEnableDelegationPrivilege -UAdministrator
>
>
>Louis
>
>
>>-----Oorspronkelijk bericht-----
>>Van: cas at altlinux.ru [mailto:samba-bounces at lists.samba.org] 
>>Namens ???????????? ??????????????????
>>Verzonden: woensdag 15 oktober 2014 15:18
>>Aan: samba at lists.samba.org
>>Onderwerp: Re: [Samba] LAM (ldap acc manager) with samba4
>>
>>15.10.2014 17:11, Elias Pereira ??????????:
>>> Hello Mourik,
>>> 
>>> I've tried various settings for the LAM administer the 
>>Samba4, but without
>>> success. With the RSAT can administer normally. But I would like to
>>> configure the LAM.
>>How do you use RSAT? I fail to connect to Samba AD DC from installed
>>RSAT on Windows (logged as Administrator). Unable to management remote
>>host. Are there any tricks for this process?
>>
>>-- 
>>Andrey Cherepanov
>>ALT Linux
>>cas at altlinux.ru
>>-- 
>>To unsubscribe from this list go to the following URL and read the
>>instructions:  https://lists.samba.org/mailman/options/samba
>>
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>



More information about the samba mailing list