Hi Tim, What we did: setting "log level = 10" in smb.conf then exdcute the following command: ------ samba-tool domain backup online --server=addc3 --targetdir=/root -k yes >backup.txt 2>&1 ------ Then we grep for the message with "call_nt_transact_query_security_desc" ------ grep call_nt_transact_query_security_desc backup.txt ------ And got nothing :-( still the same errormessage about the missing access rights I will wait for samba 4.10. ;) Best regards and thanks for your support! Benedikt -- forumZFD Entschieden für Frieden|Committed to Peace Benedikt Kaleß Leiter Team IT|Head team IT Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service Am Kölner Brett 8 | 50825 Köln | Germany Tel 0221 91273233 | Fax 0221 91273299 | http://www.forumZFD.de Vorstand nach § 26 BGB, einzelvertretungsberechtigt|Executive Board: Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, Alexander Mauz VR 17651 Amtsgericht Köln Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX
On Sat, 12 Jan 2019 16:27:06 +0100 Benedikt Kaleß via samba <samba at lists.samba.org> wrote:> Hi Tim, > > What we did: > setting "log level = 10" in smb.conf > then exdcute the following command: > ------ > samba-tool domain backup online --server=addc3 --targetdir=/root -k > yes >backup.txt 2>&1 > > ------ > Then we grep for the message with > "call_nt_transact_query_security_desc" ------ > grep call_nt_transact_query_security_desc backup.txt > ------ > And got nothing :-( > > still the same errormessage about the missing access rights > > I will wait for samba 4.10. ;) > > Best regards and thanks for your support! > > Benedikt >Just a thought, Do all the GPO's that exist in AD also exist in Sysvol of the DC you are trying to backup ? Rowland
Dear Rowland,> Just a thought, Do all the GPO's that exist in AD also exist in Sysvol > of the DC you are trying to backup ?Yes, I compared the Sysvol-Directories. They are synched correctly, all GPO's are exactly the same on both ADs. Best regards Bene -- forumZFD Entschieden für Frieden|Committed to Peace Benedikt Kaleß Leiter Team IT|Head team IT Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service Am Kölner Brett 8 | 50825 Köln | Germany Tel 0221 91273233 | Fax 0221 91273299 | http://www.forumZFD.de Vorstand nach § 26 BGB, einzelvertretungsberechtigt|Executive Board: Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, Alexander Mauz VR 17651 Amtsgericht Köln Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX