Re: [Samba] samba-tool group removemembers, not working
- Date: Tue, 28 May 2019 11:38:45 +0200
- From: "L.P.H. van Belle via samba" <samba@xxxxxxxxxxxxxxx>
- Subject: Re: [Samba] samba-tool group removemembers, not working
Can you post the output of :
ldbsearch --show-binary -H ldap://YOURDCNAME_HERE "(&(objectClass=computer)(sAMAccountName=MARKA$))" -k yes | grep -v '#' | grep -v 'ref:'
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces@xxxxxxxxxxxxxxx] Namens
> Denis Cardon via samba
> Verzonden: dinsdag 28 mei 2019 11:04
> Aan: Mark Foley; samba@xxxxxxxxxxxxxxx
> Onderwerp: Re: [Samba] samba-tool group removemembers, not working
> Hi Mark,
> > Because of other issues using ADUC, I tried to remove a
> domain member using:
> >> samba-tool group removemembers "Domain Computers" MARKA\$
> > Removed members from group Domain Computers
> > As shown, it say it "Removed members", but ...
> >> samba-tool group listmembers "Domain Computers"
> > :
> > LABRAT$
> > :
> > OHPRSSTORAGE$
> > MARKA$
> > :
> > COMMON$
> > :
> > listmembers still shows the computer as a member of "Domain
> Computers". What's up with this?
> "Domain Computers" is the primaryGroupID of AD joined computer (515).
> The computer object is a member not because it is listed in the group
> membership, but because of its primaryGroupID attribute. If
> you want to
> get it out of "domain computers", you have to change that
> attribute to
> something else.
> You can test with a different group than "Domain computers"
> or "Domain
> computers", it will work as intended.
> I admit that the message is misleading though. By the way, why do you
> want to remove that computer from "Domain Computers" group?
> > Samba Version 4.8.2
> > THX --Mark
> Denis Cardon
> Tranquil IT
> 12 avenue Jules Verne (Bat. A)
> 44230 Saint Sébastien sur Loire (FRANCE)
> tel : +33 (0) 240 975 755
> Tranquil IT recrute! https://www.tranquil.it/nous-rejoindre/
> Samba install wiki for Frenchies : https://dev.tranquil.it
> WAPT, software deployment made easy : https://wapt.fr
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
To unsubscribe from this list go to the following URL and read the