samba - Mar 2025 - Missing Policies folder in AD and /var/lib/samba/sysvol

Thanks, Rowland.

Yes, I think you're right that the original default GPOs didn't migrate 
from Window Server when I did the original Join.

Who knows why.

The default GPO's seem to be fixed as GUID 
{31B2F340-016D-11D2-945F-00C04FB984F9}/gpt.ini

I will try to provision a new samba fake domain to see if it will 
generate these files in /var/lib.

Would copying the created Policies subfolder to /var/lib/samba/sysvol 
location be sufficient to get it into AD?

Let me know if you happen to find that script file to just recreate the 
files.... :-)

-Rick

On Tue, 18 Mar 2025 19:36:38 -0600
Rick Hollinbeck via samba <samba at lists.samba.org> wrote:
> Thanks, Rowland.
> 
> Yes, I think you're right that the original default GPOs didn't
> migrate from Window Server when I did the original Join.
> 
> Who knows why.
Probably because when joining a Samba DC to an existing AD domain,
there is no code to do this.
> 
> The default GPO's seem to be fixed as GUID 
> {31B2F340-016D-11D2-945F-00C04FB984F9}/gpt.ini
There are actually two default policies.
> 
> I will try to provision a new samba fake domain to see if it will 
> generate these files in /var/lib.
It should.
> 
> Would copying the created Policies subfolder to /var/lib/samba/sysvol 
> location be sufficient to get it into AD?
Probably, as you are supposed to sync Sysvol from the first DC in a
Samba domain to any other subsequent DCs you join.
> 
> Let me know if you happen to find that script file to just recreate
> the files.... :-)
It will probably require 'dusting' off, it is quite a few years ago
since I wrote it, but let me know if you require it and I will find it,
it is in a backup folder somewhere.

Rowland