[Samba] disable automatic creation of computer accounts

Angel Bosch Mora abosch at imasmallorca.net
Tue Oct 26 11:19:52 UTC 2021


> > Can those be fine grained?
> > I just want a way to fail joining if computer isn't already created
> > on AD subtree.
> 
> I think you are going to have to script around this, check if the
> computer object exists and fail if it doesn't. I take it we are
> talking
> about joining a Unix machine.
>

No, not at all. We're talking about joining W10 machines to Samba 4.

Let me start again, I want this:

https://social.technet.microsoft.com/Forums/en-US/d2db63d9-d978-4326-9a7d-54825097eb80/require-computer-accounts-get-created-in-ad-before-joining-pcs-to-the-domain-for-security-purposes?forum=ws2016

Forget anything I said about scripting, it's irrelevant.
I just want to create computer objects and join computers to AD domain in a secure and organized way, so only precreated computers are able to join.

Does that make any sense?

abosch
-- Institut Mallorqui d'Afers Socials. Aquest missatge, i si escau, qualsevol fitxer annex, es dirigeix exclusivament a la persona que n'es destinataria i pot contenir informacio confidencial. En cap cas no heu de copiar aquest missatge ni lliurar-lo a terceres persones sense permis expres de l'IMAS. Si no sou la persona destinataria que s'hi indica (o la responsable de lliurar-l'hi) us demanam que ho notifiqueu immediatament a l'adreca electronica de la persona remitent. Abans d'imprimir aquest missatge, pensau si es realment necessari.



More information about the samba mailing list