[Samba] lock account UserAccountControl

[Omnis ludis - games]

yes, I understand that there is an account disabled and blocked, it is the
blocking that interests me, but as I understand it, this cannot be achieved
in standard ways, right? and if you make a change directly to the database?

пн, 17 июн. 2024 г. в 13:30, Rowland Penny via samba <samba at lists.samba.org
>:

> On Mon, 17 Jun 2024 11:54:13 +0300
> Omnis ludis - games via samba <samba at lists.samba.org> wrote:
>
> > Good afternoon, please tell me, I’m trying to block an account in a
> > test environment, for this I change the UserAccountControl attribute
> > by setting the bit 0x0010 which means LOCKOUT
>
> That hasn't worked since W23k
>
>
> > and also calculate
> > FILETIME + 30 min and set it to the Lockouttime attribute, but that’s
> > not the problem, the UserAccountControl attribute returns to its
> > initial value 512 DEFAULT_USER_ACCOUNT
>
> You seem to be conflating a locked account with a disabled account,
> they are different.
>
> > Does anyone have any ideas on
> > how to block an account and what attribute still needs to be changed
> > for this or is this task not possible and only entering an incorrect
> > password will lead to blocking?
>
> samba-tool user disable --help
>
> Then:
>
> samba-tool user enable --help
>
> Finally, if you have a 'locked' user:
>
> samba-tool user unlock --help
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>