[Samba] winbind behavior question

[d tbsky]

2018-07-23 18:01 GMT+08:00 Rowland Penny via samba <samba at lists.samba.org>:
> On Mon, 23 Jul 2018 17:19:07 +0800
> d tbsky <tbskyd at gmail.com> wrote:
> If, as it sounds, you were altering the users primaryGroupID attribute,
> then you should not have been doing this, because Windows expects every
> user to be a member of Domain Users.

Hi:
   sorry forgot to mention. all our users are still belong to "Domain
Users". just  "domain users" is not their primary group.
windows has no complain about this. you can change primary group by a
single click at windows ADUC, so I think it is by design for windows
AD.