[Samba] How to create an user with isCriticalSystemObject or/and showInAdvancedViewOnly

Rowland Penny rpenny at samba.org
Wed Jul 21 18:01:24 UTC 2021

On Wed, 2021-07-21 at 17:53 +0000, * Neustradamus * wrote:
> The user has all rights in the AD and this account is showed in all
> Address Book.
> Other accounts and groups with "isCriticalSystemObject=TRUE" OR
> "showInAdvancedViewOnly=TRUE" are hidden.
> How I can do to this AD admin account?

I have never done this (never felt the need to), but you can just
modify the users object and add the two attributes. Whilst it may
'hide' the users object in AD, it will still be easy to find and modify
the AD object with normal ldap tools.


More information about the samba mailing list