
Other method you can use to manage the share permissions is from Computer Management -> Connect to another computer. Manage Samba Share Directory User PermissionsĦ.

Use the below screenshot as an excerpt on how to tune permissions for specific Samba AD DC authenticated accounts. Configure Samba Share Directory Permissions Use Advanced button in order to fine tune permissions.

Navigate to Security tab and proceed with altering domain users and group permissions accordingly. To modify permissions just right click on the share and choose Properties. \\adc1Īccess Samba Share Directory from Windowsĥ. In order to access the share from Windows and set the permissions, type the IP address or host name or FQDN of the Samba AD DC machine in Windows Explorer path field, preceded by two back slashes, and the share should be visible. The process of managing permissions can be done directly from Windows Explorer, in the same way permissions are managed for any folder in Windows Explorer.įirst, log on to Windows machine with a Samba4 AD account with administrative privileges on the domain. Since we’re accessing this shared volume from Windows, using domain accounts (users and groups) that are created on Samba AD DC (the share is not meant to be accessed by Linux system users). The last thing you need to do is to restart Samba AD DC daemon in order to apply the changes by issuing the below command: # systemctl restart rviceĤ. Go to the bottom of the file and add the following lines: ģ. After you’ve created the directory that will be exported as a share from Samba4 AD DC, you need to add the following statements to samba configuration file in order to make the share available via SMB protocol. First create a directory you want to share via SMB protocol and add the below permissions on the filesystem in order to allow a Windows AD DC admin acount to modify the share permissions accordingly to what permissions Windows clients should see.Īssuming that the new file share on the AD DC would be the /nas directory, run the below commands to assign the correct permissions. The process of creating a share on Samba AD DC is a very simple task.

It will also cover how to access and mount the file share from a Linux machine enrolled into domain using a Samba4 domain account. This tutorial will guide you on how to create a shared directory on Samba AD DC system, map this Shared Volume to Windows clients integrated into the domain via GPO and manage share permissions from Windows domain controller perspective.
