[Samba] GPO on a DC
rpenny at samba.org
Tue Jun 21 16:22:51 UTC 2022
On Tue, 2022-06-21 at 10:05 -0600, David Mulder via samba wrote:
> On 6/21/22 9:23 AM, samba-ml-en via samba wrote:
> > userAccountControl=532480 is the value
> > (SERVER_TRUST_ACCOUNT|TRUSTED_FOR_DELEGATION)
> > As of oddjob-gpupdate I prefer to use winbind if possible, it is
> > more complex but has better flexibility than SSSD.
> oddjob-gpupdate isn't just for SSSD. You can use it in combination
> Winbind also. In fact, you have to use oddjob-gpupdate in order to
> utilize user policies (at least for the moment, I will add this to
> winbind at some point).
Great, Debian has supported Samba AD DC's from the very start of
Samba4, but as far as I can see, it has never provided the oddjob-
gpupdate package. Now, as a computer is a user with an extra
objectclass, where does this leave us ?
More information about the samba