Displaying 2 results from an estimated 2 matches for "2102r2".
Did you mean:
2012r2
2017 Mar 20
0
Problem sysvolreset
...Im questioning this because of the following.
>>
>> What is "Domain Admins" doing with rights on SYSVOL anyway.. ??
>>
>> There should not be any "domain admins" at all on sysvol share and
>> security rights.
>
> If you create a GPO on a 2102R2 DC, you get this on the GUID dir:
>
> "O:DAG:DAD:PAI(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED)"
>
> O = owner
> G = group
> DA = Domain Admin...
2017 Mar 20
1
Problem sysvolreset
Im questioning this because of the following.
What is "Domain Admins" doing with rights on SYSVOL anyway.. ??
There should not be any "domain admins" at all on sysvol share and security rights.
But to overcome the problem explained below.
You can use :
acl_xattr:ignore system acls = yes
And make sure sysvol and/or netlogon are windows only shares and not used by any