[PATCHES] GPO support for client machine policy
Andrew Bartlett
abartlet at samba.org
Wed Dec 6 18:02:02 UTC 2017
On Wed, 2017-12-06 at 06:39 -0700, David Mulder wrote:
> Yes, they would run simultaneously, but they apply different things.
> They also run on different intervals.
> If you look at samba_gpoupdate where it sets gp_extensions, you'll see
> it sets the extensions to apply based on the type of apply (KDC, client
> machine, or user which isn't available yet).
> I had considered removing the KDC service, but I think it is fine as is.
> The way it is now, if they choose not to configure winbind, kdc policy
> is still applied.
To be clear, winbindd is a mandatory part of the AD DC.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba-technical
mailing list