samba - Dec 2015 - Windows 10 SysVol and GPO problems

Hi,

Thanks for reading. I have recently started to try and get Windows 10 machines
working with our Samba 4.3.3 domain controller and have run into a few issues
with gpupdate /force

The error given by Windows is “The processing of group policy failed. Windows
attempted to read the file \\domain.com.au <smb://domain.com.au>” etc.

Its interesting because access is denied with the file path to sysvol as the
domain but when the domain name of the server is used it works
(“\\voyager.domain.com.au <http://voyager.domain.com.au/>”). This is the
domain name used by Windows 8.1 when running gpupdate /force

Another note is when navigating to Sysvol as Administrator I am denied access
but if I used the machine domain name it works.

Thanks in advance for the help.

Kind Regards

Ok, so do the following. 

1) login as a user. 
	Open explorer and go to \\servername.domain.tld\sysvol  
	Do the same for \\servername\sysvol  
	Do both work on only one and which one? 
2) login as a Administrator
	Open explorer and go to \\servername.domain.tld\sysvol  
	Do the same for \\servername\sysvol  
	Do both work on only one and which one? 

Of the \\servername.domain.tld\sysvol work 

Try this on you computer, run_as Administrator CMD
sc.exe config lanmanworkstation depend=bowser/mrxsmb10/nsi
sc.exe config mrxsmb20 start=disabled

Windows 10 will try to negotiate SMB3_11, which apparenty goes wrong. 
So try for now disabling SMB2/3 on the Windows 10 client is your best,
not ideal, option.

Or set the max protocol in smb.conf ( see man smb.conf ) 


Greetz, 

Louis




> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens thomas Thomas
> Verzonden: donderdag 31 december 2015 0:30
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Windows 10 SysVol and GPO problems
> 
> Hi,
> 
> Thanks for reading. I have recently started to try and get Windows 10
> machines working with our Samba 4.3.3 domain controller and have run into
> a few issues with gpupdate /force
> 
> The error given by Windows is “The processing of group policy failed.
> Windows attempted to read the file \\domain.com.au
<smb://domain.com.au>”
> etc.
> 
> Its interesting because access is denied with the file path to sysvol as
> the domain but when the domain name of the server is used it works
> (“\\voyager.domain.com.au <http://voyager.domain.com.au/>”). This is
the
> domain name used by Windows 8.1 when running gpupdate /force
> 
> Another note is when navigating to Sysvol as Administrator I am denied
> access but if I used the machine domain name it works.
> 
> Thanks in advance for the help.
> 
> Kind Regards
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba