[Samba] Logon scripts and AD...

[Rowland Penny]

On Thu, 08 Mar 2018 23:10:08 +1300
Andrew Bartlett via samba <samba at lists.samba.org> wrote:

> On Thu, 2018-03-08 at 11:04 +0100, Marco Gaiarin via samba wrote:
> > I'm a bit confused.
> > 
> > How i can set a netlogon script? Samba wiki seems does not contain
> > hint, smb.conf manpage does not explicitly reference 'logon script'
> > option as 'deprecated' (or non working) one in AD.
> > 
> > So:
> > 
> > a) 'logon script' work in AD mode?
> 
> No.
> 
> > b) the correct way to set netlogon script are via GPO? Like in:
> > 
> > 	https://www.petri.com/setting-up-logon-script-through-gpo-windows-server-2008
> > 
> > (first link hitted on google).
> 
> I had thought the correct way would be to set the attribute on the
> user, but if GPOs work then do that.  (They are read client side). 
> 
> Andrew Bartlett

No, 'logon script' doesn't work in AD mode, you need to use the
'scriptPath' attribute in AD or a GPO.

Rowland