[Samba] Share users across domains

[Stephan Mattecka]

Hello Rodrigo,

I would create one Domain and put your students into one group. Then you create a OU (Organizational Unit) for the admin computers and put all the admin computers into that OU. After that you create a gpo in the OU that contains all your admin computers. In this gpo you can deny login for the students group as describe on the following site 

https://4sysops.com/archives/deny-and-allow-workstation-logons-with-group-policy/

All this can be done using the Remote Server Administration Tool (RSAT) by running "dsa.msc" and "gpmc.msc" on the machine which has the RSAT installed.

Best
Stephan

> Gesendet: Dienstag, 27. März 2018 um 16:05 Uhr
> Von: "Rodrigo Abrantes Antunes via samba" <samba at lists.samba.org>
> An: Waishon <waishon009 at gmail.com>
> Cc: samba at lists.samba.org
> Betreff: Re: [Samba] Share users across domains
>
>   And how can I use these gpos?  I need to configure a gpo that pevent  
> student login in each administrative machine? 
> 
> Citando Waishon <waishon009 at gmail.com>:
> 
> > Hi,
> >  
> >   I would use one domain and some groups. So you put your Students  
> > in the "students" group and the administratives in the "admin".
> >  
> >   Then simply create two OUs, one for the admin machine and one for  
> > the machine for both. Then you're able to create some group policy's  
> > to restrict the login to the admin group for the admin machine OU.
> >  
> >   This is a scenario where you can find a lot of tutorials on the  
> > internet. All Microsoft tutorials about setting up groups,  
> > permissions or GPOs would apply here.
> >   (As far as you would like to use Windows machines, are you?  
> > Otherwise you should mention which OS you will use in your  
> > environment :)).
> >  
> >   Von: Rodrigo Abrantes Antunes via samba
> >   Gesendet: Dienstag, 27. März, 15:29
> >   Betreff: [Samba] Share users across domains
> >   An: samba at lists.samba.org
> >
> >  
> >   Hi, I'm new to samba and I need help in how to setup this: ​I have  
> > 2 networks: Academic and Administrative ​I have 2 kind of users:  
> > Students and Administratives ​What I need is this:  ​Students can  
> > only login in the Academic network ​Administratives need to login in  
> > both networks ​I think about make 2 domais and put the academic  
> > machines in the academic domain and the administrative machines in  
> > the administrative domain, but in this way how could I make  
> > administrative users login in the academic machines?   -- Rodrigo  
> > Abrantes Antunes Instituto Federal Sul-rio-grandense -- To  
> > unsubscribe from this list go to the following URL and read the  
> > instructions: https://lists.samba.org/mailman/options/samba
> >  
> -- 
> Rodrigo Abrantes Antunes
> Instituto Federal Sul-rio-grandense
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>