samba - Nov 2015 - Missing Policies directory -> how to recreate it?

Hi all,

As I'm dumb, last time I played to update Samba version I forgot to keep a
copy Policies directory in $samba_dir/sysvol/$samba_domain_name/.

Is there any command to rebuild that directory with default policies?

If there is not, are the IDs of default policies are always the same or
samba generates this IDs? If they are always the same I would be able to
copy them from another domain, a blank one.

Cheers,

mathias

On 11/24/2015 10:40 AM, mathias dufresne wrote:
> Hi all,
>
> As I'm dumb, last time I played to update Samba version I forgot to
keep a
> copy Policies directory in $samba_dir/sysvol/$samba_domain_name/.
>
> Is there any command to rebuild that directory with default policies?
>
> If there is not, are the IDs of default policies are always the same or
> samba generates this IDs? If they are always the same I would be able to
> copy them from another domain, a blank one.
>
> Cheers,
>
> mathias
Do you mean the default Domain Group Policy and Domain Controller Group 
policy? If so yes. Follow this link.

https://support.microsoft.com/en-us/kb/556025

I've never created the directory only the policies. I assume you may be 
able to create the directory and reset the permissions on the sysvol?


-- 
-James

Greetings, mathias dufresne!
> As I'm dumb, last time I played to update Samba version I forgot to
keep a
> copy Policies directory in $samba_dir/sysvol/$samba_domain_name/.
> Is there any command to rebuild that directory with default policies?
> If there is not, are the IDs of default policies are always the same or
> samba generates this IDs? If they are always the same I would be able to
> copy them from another domain, a blank one.
samba-tool ntacl sysvolreset

That should hopefully recreate the structure.


-- 
With best regards,
Andrey Repin
Tuesday, November 24, 2015 19:47:19

Sorry for my terrible english...

Am 24.11.2015 um 17:48 schrieb Andrey Repin:
> samba-tool ntacl sysvolreset
> 
> That should hopefully recreate the structure.
sysvolreset doesn't re-create the content. It resets the ACLs.


Regards,
Marc