search for: dcgpofix

Hi, Is there any way we can rebuild corrupt Default Domain Policy and Default Domain Controller Policy. In windows AD we can use dcgpofix utility to recreate the Default Domain and Domain Controller Policies. Something similar available in Samba AD DC? -- Thanks & Regards, Anantha Raghava Do not print this e-mail unless required. Save Paper & trees.

...ia samba: >> Is there any way we can rebuild corrupt Default Domain Policy and >> Default Domain Controller Policy. > What is broken? Entire Default Domain and Default Domain Controller Policies along with other Polices that we had built are broken. >> In windows AD we can use dcgpofix utility to recreate the Default Domain >> and Domain Controller Policies. Something similar available in Samba AD DC? > You can recover the files from your backup and to reset Sysvol/directory > ACLs, run > # samba-tool ntacl sysvolreset I believe, samba-tool ntacl sysvolreset does n...

...d to), but it should work, it is just a bash interpretation of the python code used during provision. It was written on Devuan (Debian without systemd), so if you are using some other OS, or have moved sysvol (not a good idea), then you may need to tweak it. > >> In windows AD we can use dcgpofix utility to recreate the Default > >> Domain and Domain Controller Policies. Something similar available > >> in Samba AD DC? > > You can recover the files from your backup and to reset > > Sysvol/directory ACLs, run > > # samba-tool ntacl sysvolreset > I belie...

...2, in setntacl so I edited ntacls.py [2] and one line before the error (line 161 in this case) I add print(file) and I found default domain policie {31B2F340-016D-11D2-945F-00C04FB984F9} was gone from file system (the error is pretty clear "no such file or directory". For windows "dcgpofix will restore the default domain policy." but we are in Linux .So I had downloaded https://github.com/avati/samba/tree/master/source4/selftest/provisions/release-4-0-0/sysvol/release-4-0-0.samba.corp/Policies and replace the files again and was be able to fix it with samba-tool ntacl sysvolr...