[Samba] Deny login for a specific user in a specific machine in a samba domain

[Rodrigo Abrantes Antunes]

  I need to set this on hundred of machines. I'm thinking to set this in
registry for the local computer using a script when the machine enters the
domain. Then the users will not be able to change the value.

Citando Marc Muehlfeld <mmuehlfeld at samba.org>:

> Am 20.05.2015 um 14:00 schrieb Rodrigo Abrantes Antunes:
>> Well, samba 3 can't act as AD DC, so I guess the only way I can achieve
>> this remotely is setting this in registry using a login script. How can
I
>> set this in registry? There Isn't something that automates the creation
>> of
>> scripts that change policies by registry?
>
> I'm pretty sure, this isn't a registry setting.
>
> What's wrong with the way setting this locally once on a client? Or do
> you want to set this on hundred of machines?
>
> Btw. if there's a way to set this via logonscript, then users need the
> permissions to change this. This means on the other side: Every user can
> remove this again and allow this user to login again...
>
> Regards,
> Marc
> --
> To unsubscribe from this list go to the following URL and read
> theinstructions:  https://lists.samba.org/mailman/options/samba
-- 
Rodrigo Abrantes Antunes
Instituto Federal Sul-rio-grandense