Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be working ok, but I've noticed any user account that didn't exist locally on the linux server received the default group of 'domain users' I'd like to be able to change which default group users get assigned off of active directory but I haven't been able to find a guide explaining how to do that.

I'm not the Active Directory admin but I know that 'domain users' is the primary group for all users in AD and I don't think that needs to change.

Thanks

share|improve this question
add comment

2 Answers

up vote 0 down vote accepted

I solved the situation by making sure that any directory these new users will be accessing belongs to a group they are in and keeping things separate that way.

share|improve this answer
add comment

In AD Users and Groups, you can hit the Member Of tab, select a group and hit "Set Primary Group" to change their primary group. This carries through Samba/winbind just fine in my experience. Note that this will only work with "Security Groups", and not "Distribution Groups".

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.