Wapt and Sambaedu

[francketaude]

Hello,

Quick question: does using Wapt for software deployment cause any problems on a network running SambaSE 3 (High School)?

Thanks,
Franck.

[dcardon]

Hi Franck,

WAPT can work with client workstations on a SambaEDU server (I've done this before), but there are several things to be aware of.

The main problem you'll face is that SambaEDU creates a local GPO that doesn't conform to Windows standards, which prevents you from creating other local GPOs. WAPT uses the local GPO for WAPTExit, which launches the installation when the machine shuts down.

The best solution is to upgrade to Samba4 Active Directory. As luck would have it, that's Tranquil IT Systems' second specialty! If your entire region is using SambaEdu3, you could contact your regional education authority and council to request a migration to Samba-AD; it would make things much easier!

Best regards, Happy New Year 2018,

Denis

[francketaude]

Thank you for the incredibly quick reply!

I'm only in charge of the physics lab computers, which aren't currently running SambaSe 3.
Without any other solution, I've been managing them using gpedit.msc and Wapt for the software. But the switch to Samba is coming up, and it's good to know what will change... And based on your reply, all the options I've chosen will no longer be very functional.

I therefore conclude that before this switch:
- I'll need to remove the restrictions on each computer.
- I'll need to uninstall the Wapt agent on each computer.

Can you confirm this?

Regarding Samba 4, as things stand, I'd be very surprised if the regional council changes its plans.

Franck.

[dcardon]

Hello Franketaude

I therefore conclude that before this step:
- it will be necessary to remove the restrictions on each workstation.
- it will be necessary to uninstall the wapt agent on each workstation.

It is not necessary to uninstall WAPT, but you may find that the waptexit GPO will no longer work.

Regarding samba 4, as things stand, I would be very surprised if the region changed its orientations.

Don't lose hope!

Denis

[vcardon]

Hello Franketaude

I therefore conclude that before this step:
- it will be necessary to remove the restrictions on each workstation.
- it will be necessary to uninstall the wapt agent on each workstation.

It is not necessary to uninstall WAPT, but you may find that the waptexit GPO will no longer work.

Regarding samba 4, as things stand, I would be very surprised if the region changed its orientations.

Don't lose hope!

Denis

francketaude wrote: ↑

Never lose hope! We need one region to volunteer, and that will set things in motion for the others. We're meeting with this first major volunteer region in 10 days, and they seem very serious.

Furthermore, you should know that samba3-nt4 is currently brain-dead and its clinical demise is imminent; with the massive rollout of Windows 10 in your institutions and the fact that some NT4 functions require keeping SMB1 enabled (wannacry anyone?), or that you will no longer be able to perform Windows 10 updates because they will break your internet connections, however robust they may be. Therefore, waiting without taking action is no longer an option. It's either MSAD or Samba-AD, or a deluge of increasingly serious problems.

And when your headteachers and bursars can no longer access the internet due to Windows 10 updates, or when file and print sharing become unreliable, they'll receive a visit from the local Microsoft sales rep who will tell them that the only solution is Microsoft Active Directory. The bursar will then go to the Regional Council's High Schools Unit, and the Regional Council will foot the bill without considering whether an alternative might have existed (and for each school, this amounts to tens or even hundreds of thousands of euros). This is what's currently happening in several regions.

So yes, take action, even on your own scale and with your own resources!

Sincerely.

Vincent