winbind enum groups

On large installations using winbindd 8 it may be necessary to suppress the enumeration of groups through the setgrent(), getgrent() and endgrent() group of system calls. If the winbind enum groups parameter is no, calls to the getgrent() system call will not return any data.

Turning off group enumeration may cause some programs to behave oddly.

Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

winbind enum groups
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Samba\smb_conf\winbind enum groups
Value Namewinbind enum groups
Value TypeREG_DWORD
Default Value0
True Value1
False Value0

samba.admx

Administrative Templates (Computers)