[Samba] Samba4 GPO - set a Policy

[Sketch]

On Thu, 12 Feb 2015, Yosel Lazaro Vera Gonzalez wrote:

>> Sorry ,
>> I meant without the ADUC tool, of course I have client Windows,
>
>> I want to create a policy that prevents access to the control panel for users in a specific OU only using samba 4 without the ADUC tool

Technically, it is probably possible, but I don't think there is any 
documentation on how to do it.  Group Policy Editor (not ADUC) creates 
files in the DC's sysvol under Policies.  However, on my DC, with only a 
small number of GPOs set, there are 20 files with 5 different file 
extensions among them.  Most of them appear to be plain text files in 
various formats (ascii, xml, .ini file...), but there a few which appear 
to contain binary.

Your best bet is to install the admin tools on one of your windows 
machines (desktop or server) and use that when you need to modify group 
policies, or install windows in a VM.  I think the simple answer is if you 
want to adminster windows machines, you're going to need a windows machine 
to do it with.