[Samba] Joining samba4 as a DC to Windows Server 2012 active directory

Max Lührig max.luehrig at sophistex.com
Wed Feb 4 01:25:39 MST 2015

Hi Marc,

ok I have schema version 69, so probably the easiest way is go to the corner store and buy an additional 2K12 server. :)

Thanks thanks for your help,

Von: Marc Muehlfeld <mmuehlfeld at samba.org>
Gesendet: Dienstag, 3. Februar 2015 15:37
An: Max Lührig; samba at lists.samba.org
Betreff: Re: [Samba] Joining samba4 as a DC to Windows Server 2012 active directory

Hello Max,

Am 03.02.2015 um 10:13 schrieb Max Luehrig:
>>> It does not work. I get the following error:
>>> DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8567,

A user had the same error yesterday in IRC. His forest functional level
was "2003 interim", which isn't supported. After raising to "2003
native", he could do the join.

>>> Could this be because of the version of AD? I can't find much
>>> around compatibility of this version of Windows. Any help is greatly
>>> appreciated.
> We are using Windows 2012 R2 Domain Controller with AD level 2008 R2.

What do you mean by "AD level"? Forest and/or domain level?

And you should check your AD schema version

If your schema is 56 or higher, then your AD contains schemas from
2012/2012 R2. Samba isn't compatible with this schemas (atm).


More information about the samba mailing list