Make sure realm does not match any secondary domain set up or it will be overwritten.
Make sure realm does not match any secondary domain set up or it will be overwritten.
−
WARNING: make sure to change Windows workgroup name before provisioning because domain rename is not supported and is possible for now only with complete domain reset and loss of all machine accounts.
+
WARNING: make sure to change Windows workgroup name before provisioning because domain rename is not supported.
+
+
WARNING: domain rename is only possible for now with complete domain reset and loss of all machine accounts.
provision
provision
===Testing===
===Testing===
Line 109:
Line 111:
If all went well you can proceed to joining Windows PCs to the domain using domain administrator and password.
If all went well you can proceed to joining Windows PCs to the domain using domain administrator and password.
+
Before first login all users and admin must change their passwords from https://SME-IP/user-password portal.
Other tools available for debugging
Other tools available for debugging
ifconfig
ifconfig
Line 114:
Line 117:
sambatool
sambatool
syncadusers
syncadusers
+
===Password policies===
+
For now password changing via Ctrl-Alt-Delete is not be supported and will be disabled via password policies.
+
+
Password changing will only be possible from https://SME-IP/user-password or Server Manager - Collaboration - Users.
+
+
To prevent passwords from getting out of sync [https://wiki.koozali.org/Password Password] contrib will be installed and password aging will be activated.