[Samba] disable automatic creation of computer accounts

Rowland Penny rpenny at samba.org
Tue Oct 26 10:00:44 UTC 2021


On Tue, 2021-10-26 at 11:41 +0200, Angel Bosch Mora wrote:
> > However, that is probably still not what you are asking for. What
> > does
> > your original script actually do ? Would it matter if the join
> > created
> > the computer object in 'CN=Computers' again ? Do you know that 'net
> > ads
> > join' has a parameter '--createcomputer=OU' ?
> > 
> 
> yeah, I can work with diferent OUs if necessary.
> 
> as I see it there's 2 different steps here

I was just wondering if that was one of the things your 'creation'
script was doing, creating the computer object in a different OU.

> - Creating computer object
> - Joining computer to AD
> 
> Can those be fine grained?
> I just want a way to fail joining if computer isn't already created
> on AD subtree.

I think you are going to have to script around this, check if the
computer object exists and fail if it doesn't. I take it we are talking
about joining a Unix machine.

Rowland





More information about the samba mailing list