Samba AD DC : Basic User Management2025/09/15

	This is the basic user management for Samba4 Active Directory Domain Controller.
[1]	Display domain users list.

root@smb:~#

samba-tool user list

Administrator
krbtgt
Guest
trixie
debian

[2]	Add or delete a domain user.

# add a user

root@smb:~#

samba-tool user create serverworld

New Password:     # set password
Retype Password:
User 'serverworld' added successfully

# delete a user

root@smb:~#

samba-tool user delete serverworld

Deleted user serverworld

[3]	Reset password or set expiry for a user.

# reset password

root@smb:~#

samba-tool user setpassword serverworld

New Password:
Changed password OK

# set expiry

root@smb:~#

samba-tool user setexpiry serverworld --days=7

Expiry for user 'serverworld' set to 7 days.

[4]	Disable or Enable a user account.

root@smb:~#

samba-tool user disable serverworld

root@smb:~#

samba-tool user enable serverworld

Enabled user 'serverworld'

[5]	Display domain groups and members.

# display group list

root@smb:~#

samba-tool group list

IIS_IUSRS
DnsAdmins
Schema Admins
Enterprise Admins
Incoming Forest Trust Builders
Denied RODC Password Replication Group
Enterprise Read-only Domain Controllers
Replicator
Performance Log Users
RAS and IAS Servers
Domain Admins
Account Operators
.....
.....

# display members in a group

root@smb:~#

samba-tool group listmembers "Domain Users"

debian
krbtgt
serverworld
Administrator
trixie

[6]	Add or delete a domain group.

root@smb:~#

samba-tool group add SecAdmin

Added group SecAdmin

root@smb:~#

samba-tool group delete SecAdmin

Deleted group SecAdmin

[7]	Add or delete a member from a domain group.

root@smb:~#

samba-tool group addmembers SecAdmin serverworld

Added members to group SecAdmin

root@smb:~#

samba-tool group removemembers SecAdmin serverworld

Removed members from group SecAdmin

[8]	Display OU or OU object list.

root@smb:~#

samba-tool ou list

OU=Domain Controllers

root@smb:~#

samba-tool ou listobjects 'OU=Domain Controllers'

CN=SMB,OU=Domain Controllers

[9]	Add or delete an OU.

root@smb:~#

samba-tool ou add 'ou=Hiroshima'

Added ou "ou=Hiroshima,DC=srv,DC=world"

root@smb:~#

samba-tool ou add 'ou=Develop,ou=Hiroshima'

Added ou "ou=Develop,ou=Hiroshima,DC=srv,DC=world"

root@smb:~#

samba-tool ou list

OU=Develop,OU=Hiroshima
OU=Hiroshima
OU=Domain Controllers

Matched Content