Hi everybody,
I created some Win11 GPO rules at my testing samba-ad-dc controller and would
like to copy them to production versions.
I made backup:
samba-tool gpo backup {1BCBA7BA-C35A-45F2-85D5-8775F36FA796} -U
"DOMAIN\Administrator" --tmpdir=/root/gpo_export/
At production server I tried to restore the backup:
samba-tool gpo restore test_imported_rule
gpo_export/policy/\{1BCBA7BA-C35A-45F2-85D5-8775F36FA796\} -U
"DOMAIN\Administrator"
an I got:
Password for [DOMAIN\Administrator]:
Using temporary directory /tmp/tmp8ob13po0 (use --tmpdir to change)
GPO 'test_imported_rule' created as
{F93CC6D6-748A-4B1A-8717-D2DA0C9D40B9}
Using temporary directory /tmp/tmpmdd8c89u (use --tmpdir to change)
WARNING: No such parser for comment.cmtx
WARNING: Falling back to simple copy-restore.
WARNING: No such parser for comment.cmtx
WARNING: Falling back to simple copy-restore.
BUT:
- folder {F93CC6D6-748A-4B1A-8717-D2DA0C9D40B9} was not created
- only object test_imported_rule was created in the GPO rules tree, but is empty
( I can see it in RSAT tool at Windows PC )
- I created {F93CC6D6-748A-4B1A-8717-D2DA0C9D40B9} folder, copied the original
folder {1BCBA7BA-C35A-45F2-85D5-8775F36FA796} content into it, repair
permissions and it seems it works
Exist some more usable method, how to transfer GPOs?
Thank you very much for any advice.
Both servers (testing and production) runs Devuan daedalus and Samba is Version
4.21.5-Debian-4.21.5+dfsg-1~bpo12+1
--
Greetings, ladas