[Samba] New Samba4 AD - "Logon failure: user account restriction"
rowlandpenny at googlemail.com
Thu Apr 9 09:07:34 MDT 2015
On 09/04/15 15:52, John E.P. Hynes wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> Hi List,
> I just set up a new Samba4 AD controller, created users, etc. When I
> join a test workstation from our old, currently active domain to the
> new AD server (separate network) the join succeeds, and the user can
> log in the first time to be prompted with the "change your password"
> prompt. Immediately after changing the password, the logon fails with
> "Logon failure: user account restriction" and possible reasons.
> I looked at the policy, by default it seems to be set to hours 24/7
> and computers to log in from "any". Which is fine.
> Does anyone have a pointer for me?
> - -John
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> -----END PGP SIGNATURE-----
You refer to checking a 'policy', would this be a windows GPO ? If so,
then I think that you need to know that you cannot set password policies
on a Samba 4 AD DC via a gpo, you need to use samba-tool, see
'samba-tool domain passwordsettings --help'
More information about the samba