Bug 13182 - Cannot remove Workstation Logon Restrictions (Log On To) - net sam set worktations
Cannot remove Workstation Logon Restrictions (Log On To) - net sam set workta...
Status: NEW
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB
4.6.6
All All
: P5 normal
: ---
Assigned To: Andrew Bartlett
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2017-12-11 22:35 UTC by Chris Smith
Modified: 2017-12-12 06:20 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Smith 2017-12-11 22:35:42 UTC
Samba4-4.6.6 AD
"net sam set workstations" fails to remove all entries to allow a user to logon to all systems.

It worked in a Samba3 PDC environment by using a null value or "" (can't remember which) such as:

net sam set workstations ""

The above appears to work but the entries are unchanged.

The entries can be edited but one can no longer remove all entries.

Very problematic since Powershell cannot be used for editing hundreds of users because Samba4 does not support web services.