[Samba] Confusion about account locking policy (Samba AD/Windows 7 client)
infractory at gmail.com
Tue Dec 8 16:06:17 UTC 2015
I expect you already did that but in case of... did you rebooted your
Windows client to apply new Computer's GPO (or use gpupdate MS tool)?
2015-12-08 16:54 GMT+01:00 Ole Traupe <ole.traupe at tu-berlin.de>:
> here on the wiki
> I read this:
> "Is it possible to set user specific password policies in Samba4 (e.
> g. on a OU-base)?
> Samba can't handle GPO restrictions. You have to use 'samba-tool domain
> passwordsettings' to change password policies. But this only applies on
> domain level."
> So, I have set my account lockout policy on the Samba4 DC to '5' incorrect
> attempts. However, on a Windows 7 client it needs only 3 invalid attempts
> to get the account locked out (tested on 3 different machines). And on
> domain join it seems only to need 1 invalid attempt.
> What is the full story here?
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba