Hi, I have a domain with 2 self compiled samba DCs one is running 4.7.12 and the other is running 4.8.12. The plan is to upgrade both DCs to at least 4.9 and at some point 4.10. I am having a problem with group policy not working. I suspect there is a permission problem with the sysvol (This was once a windows 2008 domain). In searching I found https://wiki.samba.org/index.php/Sysvolreset. Given that this was written more than year ago, I am wondering if the advice and script in that link are still valid or is there a better/different way to verify permissions on the sysvol? Based on the above article the permissions on the sysvol look really wrong. Regards, -- Tom me at tdiehl.org
Hai, Try the script, make backups of you sysvol first. The script shows the correct settings, these are duplicated from a windows 2008R2 server. But here you go, the ms link to verify your settings. https://support.microsoft.com/nl-nl/help/2838154/permissions-for-this-gpo-in-the-sysvol-folder-are-inconsistent-with-th But i must also say, start with upgrading you samba-ad-dc's. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Tom > Diehl via samba > Verzonden: vrijdag 6 september 2019 16:09 > Aan: samba at lists.samba.org > Onderwerp: [Samba] Sysvol reset > > Hi, > > I have a domain with 2 self compiled samba DCs one is running > 4.7.12 and > the other is running 4.8.12. The plan is to upgrade both DCs > to at least 4.9 > and at some point 4.10. > > I am having a problem with group policy not working. I > suspect there is a > permission problem with the sysvol (This was once a windows > 2008 domain). In > searching I found > https://wiki.samba.org/index.php/Sysvolreset. Given that this > was written more than year ago, I am wondering if the advice > and script in > that link are still valid or is there a better/different way to verify > permissions on the sysvol? > > Based on the above article the permissions on the sysvol look > really wrong. > > Regards, > > -- > Tom me at tdiehl.org > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Hi Louis, On Fri, 6 Sep 2019, L.P.H. van Belle via samba wrote:> Hai, > > Try the script, make backups of you sysvol first. > > The script shows the correct settings, these are duplicated from a windows 2008R2 server. > > But here you go, the ms link to verify your settings. > https://support.microsoft.com/nl-nl/help/2838154/permissions-for-this-gpo-in-the-sysvol-folder-are-inconsistent-with-thThanks for the link. I like pictures. :-)> > But i must also say, start with upgrading you samba-ad-dc's.I plan to upgrade but I was thinking I should fix the sysvol problems before making more changes. Are you saying I should upgrade first? Is there a compelling reason to upgrade past 4.9.latest at this time? Regards, -- Tom me at tdiehl.org> > > Greetz, > > Louis > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Tom >> Diehl via samba >> Verzonden: vrijdag 6 september 2019 16:09 >> Aan: samba at lists.samba.org >> Onderwerp: [Samba] Sysvol reset >> >> Hi, >> >> I have a domain with 2 self compiled samba DCs one is running >> 4.7.12 and >> the other is running 4.8.12. The plan is to upgrade both DCs >> to at least 4.9 >> and at some point 4.10. >> >> I am having a problem with group policy not working. I >> suspect there is a >> permission problem with the sysvol (This was once a windows >> 2008 domain). In >> searching I found >> https://wiki.samba.org/index.php/Sysvolreset. Given that this >> was written more than year ago, I am wondering if the advice >> and script in >> that link are still valid or is there a better/different way to verify >> permissions on the sysvol? >> >> Based on the above article the permissions on the sysvol look >> really wrong. >> >> Regards, >> >> -- >> Tom me at tdiehl.org >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> >> > > >