Its simple, The "user" cant access the gpt.ini
Only, the "user" can be "SYSTEM" the COMPUTER$ account also,
not only the user account itself
A GPO, its processes "by and impersonating a" ...
Run getfacl on the folder of that ini and compair it with and working on.
What should show whats missing on that GPO GUID.
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> basti via samba
> Verzonden: donderdag 11 november 2021 11:11
> Aan: samba at lists.samba.org >> samba
> Onderwerp: [Samba] gpupdate /force cannot read gpt.ini
>
> Hello,
>
> I have a AD network with multiple samba AD's one is shutdown for some
> reason.
>
> For now some GPO are not applied.
> I have try to update the GPO and get the following error:
>
> "\\samdom.example.com\SysVol\samdom.example.com\Policies\{8282
> 71FE-10AD-4F27-98AF-05226933EEA9}\gpt.ini
>
>
> The ini can be accessed from windows explorer.
>
> I have no idea whats wrong there.
>
> Best Regards
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>