Sebastian Arcus
2017-Apr-27 13:58 UTC
[Samba] Enabling recycle vfs in [global] on an AD DC disables creation of GPO's
As per my other post, enabling the recycle vfs module in the [global] section of smb.conf on a Samba AD DC kills the ability to create GPO's through RSAT with the error message: "This security ID may not be assigned as the owner of this object" It probably affects other things as well on the AD DC. I've searched through Samba.org and googled in general, and couldn't find any clear info as to if recycle vfs should or shouldn't be configured in [global]. For me it has certainly worked fine in [global] for years, with Samba as NT DC. Could the information above be added in the wiki or documentation somewhere - to save others some head scratching, please.