[Samba] Can't create/update Group Policy in Samba 4.6.5

Mon Jul 3 00:04:09 UTC 2017

Hi Miguel,

Can I remove Unix Attributes of the Administrator user  and other
administrator groups (set up NIS Domain to "none") ?

I have given SeDiskOperatorPrivilege to "Domain Admins" group.

*net rpc rights grant "EMPRESA\Domain Admins" SeDiskOperatorPrivilege -U
"EMPRESA\administrator"*
Enter EMPRESA\administrator's password:
Successfully granted rights.

I have executed this following commands, but OS and Server are empty:

*smbclient //localhost/netlogon -UAdministrator -c 'ls'*
Enter EMPRESA\Administrator's password:
Domain=[EMPRESA] OS=[] Server=[]
  .                                   D        0  Mon May 15 19:09:10 2017
  ..                                  D        0  Sun Jul  2 17:07:24 2017

                39189944 blocks of size 1024. 34372144 blocks available

*smbclient -L localhost -U%*
Domain=[EMPRESA] OS=[] Server=[]

        Sharename       Type      Comment
        ---------       ----      -------
        netlogon        Disk
        sysvol          Disk
        IPC$            IPC       IPC Service (Samba 4.6.5)
Domain=[EMPRESA] OS=[] Server=[]

        Server               Comment
        ---------            -------

        Workgroup            Master
        ---------            -------

Regards,

Márcio Bacci

2017-07-02 19:31 GMT-03:00 Miguel Medalha via samba <samba at lists.samba.org>:

> > 1) Who is '30056' ? 30056 is the Administrator user.
> Administrator should remain as ID0.
>
> > 2) Have you given 'Administrator' a uidNumber ? Yes, I set up Unix
> > Attribute to Administrator and "Domain Admins", "Domain Controllers" > >
> and others groups.
> Don't do it. Administrator is a special case.
>
> > 3) Have you given 'Domain Admins' the 'SeDiskOperatorPrivilege' ? No. Is
> > necessary?
> Yes.
>
> You should follow this Samba Wiki guide:
>
> Setting up Samba as an Active Directory Domain Controller
> https://wiki.samba.org/index.php/Setting_up_Samba_as_an_
> Active_Directory_Domain_Controller
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>