ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    domain controller in the cloud for small office?

    IT Discussion
    17
    120
    9.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DustinB3403D
      DustinB3403
      last edited by

      In line with this topic does SAMBA have some kind of tie in with GPO, where you can create / edit / delete GPO's from within SAMBA?

      scottalanmillerS 1 Reply Last reply Reply Quote 1
      • Mike DavisM
        Mike Davis @gjacobse
        last edited by

        @gjacobse said in domain controller in the cloud for small office?:

        I can see the 'issue' with GPO.. you have to update the GPO per machine (Right?) whereas using a DC, you set the GPO once...
        I do think that with eight PCs,.. maybe look at the other options..

        Wouldn't that mean logging on to each machine and creating a local policy to force them to change passwords and then the user would have to do the same thing on the share from the computer acting as the server.

        scottalanmillerS 1 Reply Last reply Reply Quote 0
        • Mike DavisM
          Mike Davis @gjacobse
          last edited by

          @gjacobse said in domain controller in the cloud for small office?:

          I can see the 'issue' with GPO.. you have to update the GPO per machine (Right?) whereas using a DC, you set the GPO once...

          yes.

          scottalanmillerS 1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller @gjacobse
            last edited by

            @gjacobse said in domain controller in the cloud for small office?:

            @scottalanmiller said in domain controller in the cloud for small office?:

            @mike-davis said in domain controller in the cloud for small office?:

            @gjacobse said in domain controller in the cloud for small office?:

            HIPAA security without it.

            How do you create a password change policy that gets enforced without a domain controller?

            GPO, Salt, JumpCloud, AzureAD, etc.

            You are below even Microsoft's long stated minimum use case threshold.

            I can see the 'issue' with GPO.. you have to update the GPO per machine (Right?) whereas using a DC, you set the GPO once...

            I do think that with eight PCs,.. maybe look at the other options..

            DC has to do it per machine, just the same.

            1 Reply Last reply Reply Quote 0
            • scottalanmillerS
              scottalanmiller @DustinB3403
              last edited by

              @dustinb3403 said in domain controller in the cloud for small office?:

              In line with this topic does SAMBA have some kind of tie in with GPO, where you can create / edit / delete GPO's from within SAMBA?

              Tie in? Samba does GPO exactly like any other AD does.

              DustinB3403D 1 Reply Last reply Reply Quote 3
              • scottalanmillerS
                scottalanmiller @Mike Davis
                last edited by

                @mike-davis said in domain controller in the cloud for small office?:

                @gjacobse said in domain controller in the cloud for small office?:

                I can see the 'issue' with GPO.. you have to update the GPO per machine (Right?) whereas using a DC, you set the GPO once...
                I do think that with eight PCs,.. maybe look at the other options..

                Wouldn't that mean logging on to each machine and creating a local policy to force them to change passwords and then the user would have to do the same thing on the share from the computer acting as the server.

                That's how AD does it, if AD's system isn't enough, then AD isn't the answer.

                1 Reply Last reply Reply Quote 1
                • scottalanmillerS
                  scottalanmiller @Mike Davis
                  last edited by

                  @mike-davis said in domain controller in the cloud for small office?:

                  @gjacobse said in domain controller in the cloud for small office?:

                  I can see the 'issue' with GPO.. you have to update the GPO per machine (Right?) whereas using a DC, you set the GPO once...

                  yes.

                  No, DC is just handling the centralization for you. You can do this with a script, with Jump, with Salt, etc.

                  1 Reply Last reply Reply Quote 1
                  • DustinB3403D
                    DustinB3403 @scottalanmiller
                    last edited by

                    @scottalanmiller said in domain controller in the cloud for small office?:

                    @dustinb3403 said in domain controller in the cloud for small office?:

                    In line with this topic does SAMBA have some kind of tie in with GPO, where you can create / edit / delete GPO's from within SAMBA?

                    Tie in? Samba does GPO exactly like any other AD does.

                    So there is a Group Policy Editor that operates on CentOS or something? (no windows involved)

                    scottalanmillerS PenguinWranglerP 3 Replies Last reply Reply Quote 0
                    • scottalanmillerS
                      scottalanmiller @DustinB3403
                      last edited by

                      @dustinb3403 said in domain controller in the cloud for small office?:

                      @scottalanmiller said in domain controller in the cloud for small office?:

                      @dustinb3403 said in domain controller in the cloud for small office?:

                      In line with this topic does SAMBA have some kind of tie in with GPO, where you can create / edit / delete GPO's from within SAMBA?

                      Tie in? Samba does GPO exactly like any other AD does.

                      So there is a Group Policy Editor that operates on CentOS or something? (no windows involved)

                      Nothing I said should lead you to ask that question. I think you are not clear on what GPO is.

                      DustinB3403D 1 Reply Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller
                        last edited by

                        GPO is handled identically on Samba as it is on MS AD. That alone should answer all questions. Any editor that works with MS AD with work with Samba, no editor can tell the difference, as they are identical.

                        1 Reply Last reply Reply Quote 1
                        • scottalanmillerS
                          scottalanmiller @DustinB3403
                          last edited by

                          @dustinb3403 said in domain controller in the cloud for small office?:

                          @scottalanmiller said in domain controller in the cloud for small office?:

                          @dustinb3403 said in domain controller in the cloud for small office?:

                          In line with this topic does SAMBA have some kind of tie in with GPO, where you can create / edit / delete GPO's from within SAMBA?

                          Tie in? Samba does GPO exactly like any other AD does.

                          So there is a Group Policy Editor that operates on CentOS or something? (no windows involved)

                          Why would you want this? He has Windows machines to manage, so why avoid the Windows desktop tools in a scenario that only works when you have Windows desktops?

                          Mike DavisM 1 Reply Last reply Reply Quote 1
                          • DustinB3403D
                            DustinB3403 @scottalanmiller
                            last edited by

                            @scottalanmiller said in domain controller in the cloud for small office?:

                            @dustinb3403 said in domain controller in the cloud for small office?:

                            @scottalanmiller said in domain controller in the cloud for small office?:

                            @dustinb3403 said in domain controller in the cloud for small office?:

                            In line with this topic does SAMBA have some kind of tie in with GPO, where you can create / edit / delete GPO's from within SAMBA?

                            Tie in? Samba does GPO exactly like any other AD does.

                            So there is a Group Policy Editor that operates on CentOS or something? (no windows involved)

                            Nothing I said should lead you to ask that question. I think you are not clear on what GPO is.

                            My question was very clear, and you construed it to be something else.

                            scottalanmillerS 1 Reply Last reply Reply Quote 0
                            • Mike DavisM
                              Mike Davis @scottalanmiller
                              last edited by

                              @scottalanmiller said in domain controller in the cloud for small office?:

                              Why would you want this? He has Windows machines to manage, so why avoid the Windows desktop tools in a scenario that only works when you have Windows desktops?

                              my Linux skills are weak, so I have no interest in using Linux.

                              1 Reply Last reply Reply Quote 0
                              • Mike DavisM
                                Mike Davis @scottalanmiller
                                last edited by

                                @scottalanmiller said in domain controller in the cloud for small office?:

                                GPO, Salt, JumpCloud, AzureAD, etc.

                                Hadn't heard of JumpCloud, but this may be the answer. 10 users free.

                                scottalanmillerS gjacobseG 2 Replies Last reply Reply Quote 1
                                • scottalanmillerS
                                  scottalanmiller @DustinB3403
                                  last edited by

                                  @dustinb3403 said in domain controller in the cloud for small office?:

                                  @scottalanmiller said in domain controller in the cloud for small office?:

                                  @dustinb3403 said in domain controller in the cloud for small office?:

                                  @scottalanmiller said in domain controller in the cloud for small office?:

                                  @dustinb3403 said in domain controller in the cloud for small office?:

                                  In line with this topic does SAMBA have some kind of tie in with GPO, where you can create / edit / delete GPO's from within SAMBA?

                                  Tie in? Samba does GPO exactly like any other AD does.

                                  So there is a Group Policy Editor that operates on CentOS or something? (no windows involved)

                                  Nothing I said should lead you to ask that question. I think you are not clear on what GPO is.

                                  My question was very clear, and you construed it to be something else.

                                  Yes, very clearly not connected to what I was talking about.

                                  1 Reply Last reply Reply Quote 0
                                  • scottalanmillerS
                                    scottalanmiller @Mike Davis
                                    last edited by

                                    @mike-davis said in domain controller in the cloud for small office?:

                                    @scottalanmiller said in domain controller in the cloud for small office?:

                                    GPO, Salt, JumpCloud, AzureAD, etc.

                                    Hadn't heard of JumpCloud, but this may be the answer. 10 users free.

                                    They are on here, on SW, were at SpiceWorld with a booth, too. Seems like a cool product.

                                    larsen161L 1 Reply Last reply Reply Quote 0
                                    • gjacobseG
                                      gjacobse @Mike Davis
                                      last edited by

                                      @mike-davis said in domain controller in the cloud for small office?:

                                      @scottalanmiller said in domain controller in the cloud for small office?:

                                      GPO, Salt, JumpCloud, AzureAD, etc.

                                      Hadn't heard of JumpCloud, but this may be the answer. 10 users free.

                                      I don't know the name either,.. and they seem like a good viable solution for 8 users..

                                      1 Reply Last reply Reply Quote 0
                                      • Mike DavisM
                                        Mike Davis
                                        last edited by

                                        Just did the math for moving beyond 10 users. JumpCloud makes sense if you're under 14 users. Beyond that the $111 for Azure works out better.

                                        1 Reply Last reply Reply Quote 2
                                        • NashBrydgesN
                                          NashBrydges @Mike Davis
                                          last edited by

                                          @mike-davis I've been using JumpCloud on Scott's recommendation from a few months ago. It's worked well for what I needed for my team but I don't have HIPAA requirements.

                                          1 Reply Last reply Reply Quote 1
                                          • Reid CooperR
                                            Reid Cooper @Mike Davis
                                            last edited by

                                            @mike-davis said in domain controller in the cloud for small office?:

                                            @gjacobse said in domain controller in the cloud for small office?:

                                            HIPAA security without it.

                                            How do you create a password change policy that gets enforced without a domain controller?

                                            Enforcement is always local, never from the controller. The Local Group Policy Editor is the standard tool for setting this on a Windows machine, or the Local Security Policy console.

                                            With the LSP:

                                            1. To open Local Security Policy, on the Start screen, type secpol.msc, and then press ENTER.
                                            2. Under Security Settings of the console tree, do one of the following:
                                              • Click Account Policies to edit the Password Policy or Account Lockout Policy.
                                              • Click Local Policies to edit an Audit Policy, a User Rights Assignment, or Security Options.
                                            3. When you find the policy setting in the details pane, double-click the security policy that you want to modify.
                                            4. Modify the security policy setting, and then click OK.

                                            With the LGPE

                                            1. Open the Local Group Policy Editor (gpedit.msc).
                                            2. In the console tree, click Computer Configuration, click Windows Settings, and then click Security Settings.
                                            3. Do one of the following:
                                              • Click Account Policies to edit the Password Policy or Account Lockout Policy.
                                              • Click Local Policies to edit an Audit Policy, a User Rights Assignment, or Security Options.
                                            4. In the details pane, double-click the security policy setting that you want to modify.
                                            5. Modify the security policy setting, and then click OK.

                                            Reference: https://docs.microsoft.com/en-us/windows/device-security/security-policy-settings/how-to-configure-security-policy-settings

                                            1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 6
                                            • 1 / 6
                                            • First post
                                              Last post