Samba4 Administration - Revision history

Stadm1: /* WSUS */

2016-02-04T23:50:55Z

WSUS

Stadm1: /* Managing Domain */

2016-02-04T23:19:16Z

Managing Domain

Stadm1 at 20:52, 5 December 2014

2014-12-05T20:52:27Z

Stadm1: /* Quick Shortcuts/Tutorial */

2014-12-05T20:51:42Z

Quick Shortcuts/Tutorial

Stadm1: /* Quick Shortcuts/Tutorial */

2014-12-05T20:49:56Z

Quick Shortcuts/Tutorial

Stadm1: /* Quick Shortcuts/Tutorial */

2014-12-05T20:49:40Z

Quick Shortcuts/Tutorial

Stadm1: /* Quick Shortcuts/Tutorial */

2014-12-05T20:49:21Z

Quick Shortcuts/Tutorial

Stadm1: /* Quick Shortcuts/Tutorial */

2014-12-05T20:48:18Z

Quick Shortcuts/Tutorial

Stadm1: /* Quick Shortcuts/Tutorial */

2014-12-05T20:16:42Z

Quick Shortcuts/Tutorial

Stadm1: /* Test an Image */

2014-12-05T19:40:00Z

Test an Image

← Older revision		Revision as of 23:50, 4 February 2016
Line 121:		Line 121:
	*http://mizitechinfo.wordpress.com/2013/08/19/step-by-step-installing-configuring-wsus-in-server-2012-r2/		*http://mizitechinfo.wordpress.com/2013/08/19/step-by-step-installing-configuring-wsus-in-server-2012-r2/
	*http://technet.microsoft.com/en-us/library/hh852344.aspx		*http://technet.microsoft.com/en-us/library/hh852344.aspx
		+	*Download ADM files from Microsoft, http://www.microsoft.com/en-us/download/details.aspx?id=18664
		+	*Install when asked, navigate to where it installed the ADM files. Usually C:\Program Files(x86)\Microsoft Group Policy\Windows Server...\...
		+	*copy only wuau.adm to \\mydomain.edu\sysvol\mydomain.edu\Policies\PolicyDefinitions\
		+	*Edit GPO
		+	*Go to Computer Configuration => Policies => Administrative Templates => Windows Components => Windows Update
		+	*still testing, enable the following
		+	Configure Automatic Updates: Enabled: Auto Download and Schedule Install: Every Day: 17:00
		+	Specify intranet Microsoft update service location: Enabled: http://servername:port, http://servername:port
		+	Automatic Updates Detection Frequency: enabled 12 hours
		+	Allow non administrators to receive update notifications : enabled
		+	Allow Automatic Updates immediate installation: Enabled
		+	No auto-restart with logged on user for scheduled automatic updates installations: Enabled
		+	Reschedule Automatic Updates scheduled installations: Enabled: 10 minutes
		+	Enable clients-de targeting: Enabled or Disabled, can be used to organize wsus better
		+	Allow signed updates from an intranet Microsoft update service location: enabled

@@ Line 29: / Line 29: @@
 *Any computer on the Domain can manage the domain controller(rumba), as long as you are an Administrator to the Domain and have RSAT installed(see below)
 *Because there are two domain controllers you want to make sure you are making your changes to rumba and not limbo
-*'''NOTE:''' if you're going to do the following run the eadm_backup script BEFORE you make any changes to GPO, in case you mess up, these backups will save you form a nightmare
+*'''NOTE:''' if you're going to do the following run a backup first:
 *Any GPO edits will have to be manually rsynced to limbo(you want to make your changes on rumba)
 **This can and will be scripted, at the moment not enough testing has been done to ensure the script will not mess up the GPO's(basically the SYSVOL folder) which can lead to corruption and a huge headache if there are no recent backups
@@ Line 42: / Line 39: @@
 *that was the dry run version, it will only tell you what files it will overwrite/write if run without the dry-run option, once you have seen the dry-run output and want to copy those files run:
   rsync -XAavz --delete-after root@rumba:/usr/local/samba/var/locks/sysvol/ /usr/local/samba/var/locks/sysvol/
 ==Install RSAT==
 *If not installed on your Windows Computer Remote Server Administration Tools(RSAT) will have to be downloaded and installed

@@ Line 3: / Line 3: @@
 [[Category:Samba]]
 [[Category:Samba4AD]]
 ==Managing Domain==
@@ Line 96: / Line 117: @@
 *Link: http://technet.microsoft.com/en-us/library/jj649079.aspx
 *Basically you install an update from Microsoft and edit a registry key so that Windows Server 2012 will pick up the profile with the .V3 extension instead of .V2 which is used for Windows 7
 ==MAC==

@@ Line 114: / Line 114: @@
 **gpmc.msc  -  Group Policy Management, here you can view and edit Group Policy Objects(GPOs) applied to the domain
 **eventvwr  -  Event Viewer, Windows log files, this is where your errors/warnings will be when troubleshooting windows
 [[File:win_r_admin.png|900px|Admin Tools]]

@@ Line 114: / Line 114: @@
 **gpmc.msc  -  Group Policy Management, here you can view and edit Group Policy Objects(GPOs) applied to the domain
 **eventvwr  -  Event Viewer, Windows log files, this is where your errors/warnings will be when troubleshooting windows
-[[File:win_r_admin.png|700px|Admin Tools]]
+[[File:win_r_admin.png|900px|Admin Tools]]
 ==MAC==

@@ Line 105: / Line 105: @@
 *The following prompt should pop up:
 [[File:win_R.png|Windows Key + R]]
 ==MAC==