[Samba] Prevent AD Enmeration

[Anton Shevtsov]

10.07.2024 14:41, Anantha Raghava via samba пишет:
> Hi,
>
> Is there any setting in smb.conf that prevents the AD enumeration like 
> user, group or computer enumeration? We tried to follow different 
> methods recommended by Microsoft for the AD. But they don't seem to 
> work. Still using apps like powershell, we can still enumerate the 
> users, groups etc.

/etc/samba/smb.conf

[global]
restrict anonymous = 2

Additionally

samba-tool forest  directory_service dsheuristics 0000000

--

Anton