Messages

1

Directory and Authentication / Re: Domain Controller - how to check what causes if account User AD is locked

« on: December 18, 2020, 10:27:26 am »

Thanks!

Do You know why after fail login attempt (client windows 10 pro) - user get message - Your account is disabled. It should be - Your account is locked.

Cheers

2

Directory and Authentication / Re: Domain Controller - how to check what causes if account User AD is locked

« on: December 18, 2020, 08:10:24 am »

Hi! I need more info... please.. the user locked is lock on only computer or all compuerts is locked for this user? used roaming profiles? much question could create now only for reason, butr one solution fast is delete the user (before, create files user back-up ) and create again this username, this dont resolve your problem but is generate other gid for username. this usermane is probally havent more problems...

***edit1;

   Samba supports logging of successful authorization events but not unsuccessful authorization events. It can log both successful and unsuccessful authentication events.

https://wiki.samba.org/index.php/Setting_up_Audit_Logging

----

Some command pdbedit or wbinfo can great utilities!!

Hi
How to modify file smb.conf because after restart any changes are destroyed ?

3

Directory and Authentication / Domain Controller - how to check what causes if account User AD is locked

« on: December 03, 2020, 02:22:42 pm »

Hi,
Where can I find what causes User AD his account is locked (from which ip, computer name, application,...). Zentyal 6.1

I'm looking for /var/log/samba/samba.log - but I can't find anything about user AD lock account

Best Regards
Mark

4

Directory and Authentication / False message - "Your account is disabled"

« on: March 02, 2020, 07:35:07 pm »

hi
My Windows 10 client locked account after 3 bad attempt's - that's OK.
But the client login message is "Your account is disabled". It should be "Your account is locked".

Any idea ?

Regards

5

Directory and Authentication / Problem with mapping drive on client Windows 10 - Zentyal server 6.1

« on: February 23, 2020, 09:17:57 am »

hello
Maybe someone facing problem with mapping drive on client Windows 10 <-> Zentyal server 6.1 AD
I don't use script "net use" but mapping with GPO Preference
Here's debug gpo log from Windows 10 client

Code: [Select]

GPSVC(788.2300) 10:26:50:488 ProcessGPO(User):  GPO passes the filter check.
GPSVC(788.2300) 10:26:50:488 ProcessGPO(User):  Found functionality version of:  2
GPSVC(788.2300) 10:26:50:488 ProcessGPO(User):  Found file system path of:  <\\xx-xx.local\sysvol\xx-xx.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
GPSVC(788.2300) 10:26:50:722 ProcessGPO(User):  Couldn't find the group policy template file <\\xx-xx.local\sysvol\xx-xx.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>, error = 0x80090006. DC: srv-xx-xx.xx-xx.local
GPSVC(788.2300) 10:26:50:722 ProcessGPO(User):  ==============================
GPSVC(788.2300) 10:26:50:722 EvalList:  ProcessGPO failed
GPSVC(788.2300) 10:26:50:738 GetGPOInfo:  EvaluateDeferredGPOs failed. Exiting
GPSVC(788.2300) 10:26:50:738 GetGPOInfo:  Leaving with 0
GPSVC(788.2300) 10:26:50:738 GetGPOInfo:  ********************************
GPSVC(788.2300) 10:26:50:738 ProcessGPOs(User): GetGPOInfo failed.
Client has accees to the path \\xx-xx.local\sysvol\xx-xx.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini
If I remove policy {31B2F340-016D-11D2-945F-00C04FB984F9} they stop with the same error on another one.

Yours faithfully