[Samba] Problem sysvolreset

[Rowland Penny]

On Tue, 7 Mar 2017 13:16:23 -0300
Edson Tadeu Almeida da Silveira <edson.tadeu at gmail.com> wrote:

> Hi Rowland.
> 
> But, samba automaticaly do this mapping.
> 
> root at server:/usr/local/src/samba-4.4.10# id 'domain admins'
> uid=3000008(DOMAIN\domain admins) gid=3000008(DOMAIN\domain admins)
> groups=3000008(DOMAIN\domain admins)
> 
> 
> Because of this options in smb.conf:
> 
> winbind enum users = yes
> winbind enum groups = yes
> 
> Can i remove this mapping only for domain admin group?

No and those options aren't doing the mapping. All they do is make
'getent passwd' & 'getent group' show all users and groups, without
them, you will have to do 'getent passwd username' or 'getent group
groupname'. You do not need them for Samba to work.

The problem with the GPOs that you are adding is that Samba seems to
think they should be set differently to what windows sets them to.

Big hint here, don't use sysvolreset if you add any GPOs

Rowland