[Samba] Regular users can't log in to Samba AD DC from Windows

[Rowland Penny]

On Mon, 6 Feb 2017 10:07:18 +0200
Alnis Morics via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> I continue setting up my FreeBSD 11.0 machine with Samba 4.4.9 built 
> from sources. (Actually, OS type and Samba version don't matter so
> much, as I have the same problem with Debian Jessie and Samba 4.5.5)
> 
> I followed the Wiki very close. Some details from provisioning:

Did you run the provision command like this:

samba-tool domain provision --use-rfc2307 --interactive

> 
> [samba-share]
>         path = /samba-share
>         read only = no
> 

Have you set up the libnnss_winbind links ?


> 
> Next, I successfully joined a Windows 10 Enterprise machine and
> logged in as a domain administrator. I can access the file share,
> write to it, set Windows permissions.
> 
> But when I open ADUC and click a user properties, I only have 5 tabs 
> there (Environment, Sessions, Remote control, Remote Desktop Service 
> Profile, COM+), and I can't add any other user. Windows just says 
> nothing but from Samba logs I see something like this:

This is a windows 10 problem, do a search on 'windows 10 missing tabs'

Rowland