Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Ubuntu - Samba - Active Directory User Management ======

This is the basic user management for Samba4 Active Directory Domain Controller.

----

===== Display domain users =====

<code bash>
sudo samba-tool user list
</code>

returns:

<code bash>
Administrator
testuser
Guest
</code>

----


===== Add a domain user =====

<code bash>
sudo samba-tool user create testuser

New Password:     # set password

Retype Password:
User 'testuser' created successfully
</code>

<WRAP info>
**NOTE:**  See many other options with:

<code bash>
samba-tool user create --help
</code>

</WRAP>

----

===== Delete a domain user =====

<code bash>
sudo samba-tool user delete testuser
</code>

returns:

<code bash>
Deleted user testuser
</code>

----

===== Reset password for a user =====

<code bash>
sudo samba-tool user setpassword testuser

New Password:
Changed password OK
</code>

----

===== Set expiry for a user =====

<code bash>
sudo samba-tool user setexpiry testuser --days=7

Expiry for user 'testuser' set to 7 days.
</code>

----

===== Disable/Enable user account =====

<code bash>
sudo samba-tool user disable testuserr
sudo samba-tool user enable testuser

Enabled user 'testuser'
</code>

----


===== Display domain groups list =====

<code bash>
sudo samba-tool group list

Allowed RODC Password Replication Group
Enterprise Read-Only Domain Controllers
Denied RODC Password Replication Group
...
...
DnsAdmins
Guests
Users
</code>

----

===== Display members in a group =====

<code bash>
sudo samba-tool group listmembers "Domain Users"

Administrator
testuser
bionic
</code>

----

===== Add a domain group =====

<code bash>
sudo samba-tool group add ShareWiz

Added group ShareWiz
</code>

<WRAP info>
**NOTE:**  See many other options with:

<code bash>
samba-tool group add --help
</code>

</WRAP>

----

===== Delete a domain group =====

<code bash>
sudo samba-tool group delete ShareWiz

Deleted group ShareWiz
</code>

----

===== Add/remove a member from a domain group =====

<code bash>
sudo samba-tool group addmembers ShareWiz testuser

Added members to group ShareWiz
</code>


<code bash>
sudo samba-tool group removemembers ShareWiz testuser

Removed members from group ShareWiz 
</code>