[Samba] Joining samba4 as a DC to Windows Server 2012 active directory

Max Lührig max.luehrig at sophistex.com
Wed Feb 4 00:46:37 MST 2015

>Hello Max,
>Am 03.02.2015 um 10:13 schrieb Max Luehrig:
>>>> It does not work. I get the following error:
>>>> DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8567,
>A user had the same error yesterday in IRC. His forest functional level
>was "2003 interim", which isn't supported. After raising to "2003
>native", he could do the join.
>>>> Could this be because of the version of AD? I can't find much
>>>> around compatibility of this version of Windows. Any help is greatly
>>>> appreciated.
>>We are using Windows 2012 R2 Domain Controller with AD level 2008 R2.
>What do you mean by "AD level"? Forest and/or domain level?
>And you should check your AD schema version
>If your schema is 56 or higher, then your AD contains schemas from
>2012/2012 R2. Samba isn't compatible with this schemas (atm).

Hi Marc,

I started from a fresh Windows 2012 R2 installation and created a new domain. 

Domain level is: Windows Server 2008 R2
Forest level is: Windows Server 2008

Do you need further information (debug level output)?

Thanks and  appreciate your time,

More information about the samba mailing list