[Samba] Missing features in RSAT Group Policy Manager (Debian as Samba PDC)

Dennis Binkhorst dennis.binkhorst at gmail.com
Fri Mar 10 15:35:04 UTC 2023


I have been testing a Debian 11 (i386) server with samba
2:4.13.13+dfsg-1~deb11u5 running as an Active Directory Controller. This is
a stand-alone DC, meant for user authentication for a small business
network. I use RSAT Features on Windows 11 Pro to manage Users, Groups,
Machines etc., which works fine.

I would like create a new GPO using the RSAT Group Policy Manager to change
Security Settings for all machines that are in a specific OU. However, when
I try to edit the new GPO I am unable to find *Account Policies* and *Local
Policies *under *"Computer Configuration / Policies / Windows Settings /
Security Settings*". This is also the case when using RSAT from a Windows
10 Pro machine.

These Policies do exist on the Windows 11 Pro machine itself when I open
*gpedit.msc*.

Not sure if this is relevant, but I did download and install the the 22H2
ADMX Templates for Windows 11 to the Samba AD. They exists in the SYSVOL
directory.

An example of a policy I'd like to set in the GPO is *"Interactive logon:
Message text for users attempting to log on"*.
P.S.: A suggestion made elsewhere was to upgrade samba to the
bullseye-backports version, so i did that.
Upgrading to *2:4.17.5+dfsg-1~bpo11+1 *did not change anything for my issue.


More information about the samba mailing list