diff options
author | David Mulder <dmulder@suse.com> | 2020-08-06 12:38:14 -0600 |
---|---|---|
committer | David Mulder <dmulder@samba.org> | 2020-08-27 15:59:32 +0000 |
commit | 5249727f90215ef83fc7233a5e721c752b3b223d (patch) | |
tree | cd3e603eafe4842f8a397e96ef75b8811c0276b7 /WHATSNEW.txt | |
parent | f8b7ee024ba6ecabe75180047222335b6a970dda (diff) | |
download | samba-5249727f90215ef83fc7233a5e721c752b3b223d.tar.gz |
Add WHATSNEW section on Client Group Policy
Signed-off-by: David Mulder <dmulder@suse.com>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Diffstat (limited to 'WHATSNEW.txt')
-rw-r--r-- | WHATSNEW.txt | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 23210d351d8..3927c0645f1 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -17,6 +17,28 @@ NEW FEATURES/CHANGES ==================== +Client Group Policy +------------------- +This release extends Samba to support Group Policy functionality for Winbind +clients. Active Directory Administrators can set policies that apply Sudoers +configuration, and cron jobs to run hourly, daily, weekly or monthly. + +To enable the application of Group Policies on a client, set the global +smb.conf option 'apply group policies' to 'yes'. Policies are applied on an +interval of every 90 minutes, plus a random offset between 0 and 30 minutes. + +Policies applied by Samba are 'non-tattooing', meaning that changes can be +reverted by executing the `samba-gpupdate --unapply` command. Policies can be +re-applied using the `samba-gpupdate --force` command. +To view what policies have been or will be applied to a system, use the +`samba-gpupdate --rsop` command. + +Administration of Samba policy requires that a Samba ADMX template be uploaded +to the SYSVOL share. The samba-tool command `samba-tool gpo admxload` is +provided as a convenient method for adding this policy. Once uploaded, policies +can be modified in the Group Policy Management Editor under Computer +Configuration/Policies/Administrative Templates. + CTDB CHANGES ============ |