[Samba] GPO / Sysvol problems

Rowland Penny
Wed, 23 Jan 2019 17:26:35 -0000

On Wed, 23 Jan 2019 09:17:33 -0800
Gregory Sloop via samba <samba at lists.samba.org> wrote:

> So, some updates.
> I started that email a couple of hours ago - but suddenly, without
> changing a thing, the test client/station is suddenly now getting the
> correct GPO details.
>
> Yet, I've not synced the sysvol or done anything to change or update
> the GPO on either DC.

Sometimes strange things happen ;-)

>
> See inline...
>
> RPvs> On Wed, 23 Jan 2019 08:40:55 -0800
> RPvs> Gregory Sloop via samba <samba at lists.samba.org> wrote:
>
> >> So, I'm seeing some very odd behavior.
> >> I may have multiple issues - so I'm simply starting holding
the
> >> thread of the problem and working my way back.
>
> >> So, the root symptom I'm having is that a GPO isn't
applying
> >> correctly. [Roaming profiles namely.] I have two DC's. I
change the
> >> GPO on one DC and rsync the update to the other DC. I can see that
> >> the files get updated.
>
> RPvs> How are you setting the GPO ? by computer or user ?
> RPvs> Are you modifying either of the two default policies, or
> RPvs> creating a new policy ?
>
> I've got some policies that are computer based and some user based.
> [Roaming profiles is a computer policy.] I'm creating new
> policies/GPO's.

Good, sometimes people start by modifying the default policies, this
isn't allowed.

>
>
> >> Yet when I login to the domain from a test Windows workstation,
> >> it's not seeing the updated GPO data. [I'm changing the
directory
> >> where the roaming profiles are to be stored.]
>
>
> RPvs> Where are the roaming policies stored /
>
> The GPO is stored on the Samba DC's. [Your terminology is super
> vague,

That's because my fingers got away from my brain ;-)

It should have been 'profiles' not 'policies'

>IMO. I'm not sure if you're asking where the GPO (the actual
> "policy") is, or if you're asking where the roaming profile
for the
> computer/user is stored. I'm not at all sure what a "roaming
policy"
> is supposed to be.

No, I don't either LOL

Rowland