[Samba] Question to Primary Groups

Harry Jede walk2sun at arcor.de
Sun Feb 15 14:50:33 MST 2015

On 18:06:54 wrote Andreas Hauffe:
> Hi,
> if you use the UNIX attributes the primary group is ignored if you
> use winbind and the primary group of the AD attributes is used. So
> every user has the "Domain Users" group as primary group. I also
> read that you are not supposed to change the AD primary group to
> another than "Domain Users". Is there a way to set the UNIX primary
> group to another group without causing trouble in Windows? Perhaps
> create a group which is member of the "Domain Users" and make this
> the primary AD group?
Read this:

We use often other primary groups for several reasons. Important is:
1. Sync unix and windows primary group manually. Make admins life easier 
in mixed environments.
2. Each user should be member of "Domain Users". At least as secondary 


        Harry Jede

More information about the samba mailing list