search for: musings_of_a_technical_tam

Hai Marco, You can do this multiple ways. These are some good basics to read https://blogs.technet.microsoft.com/musings_of_a_technical_tam/2012/02/13/group-policy-basics-part-1-understanding-the-structure-of-a-group-policy-object/ https://blogs.technet.microsoft.com/musings_of_a_technical_tam/2012/02/15/group-policy-basics-part-2-understanding-which-gpos-to-apply/ ^^ see processing GPO Precedence.. That bit more what your looking fo...

In Samba/NT i was used to share mapping done in netlogon script, so users move around between sites, get home and profile from remote location but still have share mapped from local servers. In Samba/AD, using GPO, share mapping is in ''user policy'', and so user roam between sites and get different policies? I'm googling around but i'm a bit confused... i can still use

Hai Sam, Try the following, 1 ) ignore these messages : > If I create a new GPO The "samba-tool ntacl sysvolcheck" command return > this error : >root at S4:~# samba-tool ntacl sysvolcheck > ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - > ..... 2) add this line to you sysvol share acl_xattr:ignore system acls =

Basicly read: http://blogs.msmvps.com/acefekay/2010/01/03/the-dc-locator-process-the-logon-process-controlling-which-dc-responds-in-an-ad-site-and-srv-records/ https://technet.microsoft.com/en-us/library/cc787370(WS.10).aspx ( you can set the registry changes in the GPO ) now check this very handy site. https://www.windows-security.org/75572f3b66d75af8132ec77996f09a0c/net-logon yeah, i