[Samba] Continued Group Policy issues

Rowland Penny
Thu, 12 Jul 2018 13:12:20 -0000

On Thu, 12 Jul 2018 18:31:42 +0530
Anantha Raghava via samba <samba at lists.samba.org> wrote:

> Hello Rowland,
>
> Thanks for your quick response.
>
> We are syncing only sysvol from first Domain Controller, but not
> idmap.ldb. Do we need to sync idmap.ldb as well?
>

Yes, users and groups are mapped in idmap.ldb on a first come basis,
this means you highly likely to get different ID numbers on each DC.
This means that a group could get the ID '3000002' on the first DC and
'3000022' on another and '3000002' on the second DC could be
another
user/group.

Rowland