How-to: Enable Netlogon on an Administrative Replica Server in UCS@school

Knowledge Base Community
, , , , ,
1

Howto: Enable Netlogon on an Administrative Replica Server in UCS@school

Description:

On an administrative replica server (Verwaltungsserver) (ucsschoolRole: dc_slave_admin:school:<OU>), the default meta package ucs-school-nonedu-replica does not provide any configuration option for Netlogon.
https://docs.software-univention.de/ucsschool-manual/latest/de/installation/multi.html#installation-eines-verwaltungsservers-optional

A common question is whether the package ucs-school-netlogon-user-logonscript can simply be installed on an administrative replica to enable Netlogon functionality.

Package Information:

ucs-school-netlogon

apt-cache show ucs-school-netlogon

Package: ucs-school-netlogon
Architecture: all
Version: 11.0.0
Priority: optional
Section: univention
Maintainer: Univention GmbH <packages@univention.de>
Installed-Size: 37
Depends: shell-univention-lib, univention-config (>= 7.0.25), univention-join (>= 12.0.0-7)
Filename: ucsschool_20250612172050/all/ucs-school-netlogon_11.0.0_all.deb
Size: 5636
MD5sum: 96c31d762b588a68aa4dd188b1b6a837
SHA1: e57e2a1bb97f4e155a5c5250ab39244a86f3cf52
SHA256: 63fd7c73dc806b549069700b4a3c9b1c4a0f1fa20c4451bace1ec84054b42409
SHA512: 412ca74ff3c12a212040d5485bdb42ae7cefea35b8d8930cc5bcd57976873c0318c4ddc0d1425246d77caafdc1f4c4111fb45338488849b7992a39c0182a69d3
Description: UCS@school: netlogon template
 This package provides a script to generate a
 windows netlogon script.
 .
 It is part of Univention Corporate Server (UCS), an
 integrated, directory driven solution for managing
 corporate environments. For more information about UCS,
 refer to: http://www.univention.de/
Description-md5: bb9b5ae0708786f9842aadfac9afb22c
  • Provides the base script for generating Windows Netlogon scripts.
  • Maintainer: Univention GmbH
  • Depends on: shell-univention-lib, univention-config, univention-join

ucs-school-netlogon-user-logonscripts

apt-cache show ucs-school-netlogon-user-logonscripts

Package: ucs-school-netlogon-user-logonscripts
Architecture: all
Version: 16.0.6
Priority: optional
Section: univention
Maintainer: Univention GmbH <packages@univention.de>
Installed-Size: 246
Depends: shell-univention-lib, ucs-school-netlogon, univention-config, univention-config-registry, univention-directory-listener, univention-directory-manager-tools, univention-ldap-client, python3:any, python:any (<< 2.8), python:any (>= 2.7~)
Breaks: ucs-school-import (<< 17.0.63), ucs-school-lib (<< 12.2.28)
Filename: ucsschool_20250204171805/all/ucs-school-netlogon-user-logonscripts_16.0.6_all.deb
Size: 69684
MD5sum: 7a331cc77bb72b65712035ecc527420b
SHA1: 50c7abf5cd074dd416b599d91d919eeb393485bc
SHA256: 1b89273c0f219eb4cd5514e1cef6128b54c111f80885a51e1b53cce03c6032ac
SHA512: 904b90a92618441acc7499ecb233d9cbc2568b0153b7cd25cd966c7b99cec8f603a334f179ff61c4bbc20034bdf1a064b04e69b98cf60b2cdd96a127a4cc52fe
Description: UCS@school userspecific netlogon scripts
 This package provides a listener-module that creates
 specific netlogon scripts for each local user.
 .
 It is part of Univention Corporate Server (UCS), an
 integrated, directory driven solution for managing
 corporate environments. For more information about UCS,
 refer to: http://www.univention.de/
Description-md5: 97fc88c76a2697b08a137f572ce3f7a1
  • Provides a listener module that generates user-specific Netlogon scripts.
  • Maintainer: Univention GmbH
  • Depends on: ucs-school-netlogon, univention-config, univention-directory-listener, univention-directory-manager-tools, univention-ldap-client, python3

Solution:

Yes, it is possible to enable Netlogon functionality on an administrative replica server by installing the required packages and running their join scripts. This procedure ensures that Netlogon is available and configurable, just as it would be on other system roles.

The following steps describe the recommended installation procedure.

Steps:

To enable Netlogon on an administrative replica server, perform the following steps:

  1. Install the base Netlogon package:

    • univention-install ucs-school-netlogon

  2. Install the user-specific Netlogon scripts package:

    • univention-install ucs-school-netlogon-user-logonscripts

  3. Run the corresponding join scripts:

    • univention-run-join-scripts --run-scripts 99ucs-school-netlogon.inst
    • univention-run-join-scripts --run-scripts 99ucs-school-netlogon-user-logonscripts.inst

After completing these steps, the administrative replica server will support Netlogon configuration in the same way as other UCS@school system roles.

See also: