[Samba] Group policy issue

Rowland penny rpenny at samba.org
Thu Nov 21 18:47:00 UTC 2019


On 21/11/2019 16:59, Glenn Clark via samba wrote:
> Hi All
>
> New to running Samba ad on a server and could do with a little advise.
>
> I have build and Ubuntu 18.04 server with Samba 4 AD just 1 server and nothing else. The installation went fine with no issues and I have added a windows 10 pc to the domain and can login to the pc with any account I have created on the domain.
>
> I have installed RSAT tools to user with users and computers and Group Policy. With this I set 2 parts of the policy on the default domain policy for expiry of the current password and the login text banner that say welcome to the domain (just for testing) When I login I don't get prompted to to change the password which is past the max days and also the login message does not appear. I did dig in to the registry on the Windows 10 box and can see the login text has been imported in to the settings.
>
> If I run GPRESULT /H GPResult.html to get info on the login it does say that under denied GPO that it was denied because it was empty but it's clearly not.
>
> Can anyone suggest where the issue may lie or how to debug the issue as am at a loss at the moment
>
> Thanks
>
>
>
Do not alter either of the two default policies, it doesn't seem to 
work. Create a new policy.

Rowland






More information about the samba mailing list