search for: sysvol_acl

...se_ntvfs) File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 932, in upgrade_from_samba3 result.names.domaindn, result.lp, use_ntvfs) File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1562, in setsysvolacl setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb) File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 154, in setntacl smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL,...

...quot;/usr/local/samba/lib/python2.7/site-packages/samba/upgrade.py", line 935, in upgrade_from_samba3 result.names.domaindn, result.lp, use_ntvfs) File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1562, in setsysvolacl setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb) File "/usr/local/samba/lib/python2.7/site-packages/samba/ntacls.py", line 154, in setntacl smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINF...

...return self.run(*args, **kwargs) File "/opt/samba/lib/python2.6/site-packages/samba/netcmd/ntacl.py", line 214, in run lp, use_ntvfs=use_ntvfs) File "/opt/samba/lib/python2.6/site-packages/samba/provision/__init__.py", line 1563, in setsysvolacl setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb) File "/opt/samba/lib/python2.6/site-packages/samba/ntacls.py", line 154, in setntacl smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL...

...446, in run lp) File "/usr/lib/python3/dist-packages/samba/provision/__init__.py", line 1901, in checksysvolacl raise ProvisioningError('%s ACL on sysvol directory %s %s does not match expected value %s from provision' % (acl_type(direct_db_access), dir_path, fsacl_sddl, SYSVOL_ACL)) So I tried running samba-tool ntacl sysvolreset and I get: idmap range not specified for domain '*' idmap range not specified for domain '*' idmap range not specified for domain '*' ... idmap range not specified for domain '*' idmap range not specified for domain...

...p) > File "/usr/lib/python3/dist-packages/samba/provision/__init__.py", line 1901, in checksysvolacl > raise ProvisioningError('%s ACL on sysvol directory %s %s does not match expected value %s from provision' % > (acl_type(direct_db_access), dir_path, fsacl_sddl, SYSVOL_ACL)) > > So I tried running samba-tool ntacl sysvolreset and I get: > > idmap range not specified for domain '*' > idmap range not specified for domain '*' > idmap range not specified for domain '*' > ... > idmap range not specified for domain '*'...

...;/usr/local/samba/lib64/python2.7/site-packages/samba/upgrade.py", line 932, in upgrade_from_samba3 result.names.domaindn, result.lp, use_ntvfs) File "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1562, in setsysvolacl setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb) File "/usr/local/samba/lib64/python2.7/site-packages/samba/ntacls.py", line 154, in setntacl smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECI...

...un lp) File "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1728, in checksysvolacl raise ProvisioningError('%s ACL on sysvol directory %s %s does not match expected value %s from provision' % (acl_type(direct_db_access), dir_path, fsacl_sddl, SYSVOL_ACL)) # samba-tool ntacl sysvolreset -U administrator lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[global]" Processing section "[netlogon]" Processing section &...

...lp) File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1728, in checksysvolacl raise ProvisioningError('%s ACL on sysvol directory %s %s does not match expected value %s from provision' % (acl_type(direct_db_access), dir_path, fsacl_sddl, SYSVOL_ACL)) # samba-tool gpo aclcheck -U Administrator Password for [DOMAIN\Administrator]: ERROR: Invalid GPO ACL O:LAG:DAD:PAI(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) on pat...

...un lp) File "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1728, in checksysvolacl raise ProvisioningError('%s ACL on sysvol directory %s %s does not match expected value %s from provision' % (acl_type(direct_db_access), dir_path, fsacl_sddl, SYSVOL_ACL)) # getfacl /usr/local/samba/var/locks/sysvol/domain.local/Policies/\{31B2F340-016D-11D2-945F-00C04FB984F9\}/GPT.INI getfacl: Removing leading '/' from absolute path names # file: usr/local/samba/var/locks/sysvol/domain.local/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/GPT.INI #...

Colleagues, I come to seek help to solve this problem. I use Samba 4.4.5. I'm getting errors when running gpupdate / force on local desktops. I get the following error: User policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. Windows could not apply the registry-based policy settings for the Group Policy object

Hai, After lots of testing and checking today im must concluded that achim and mathias are right. There are "BUILDIN\" security groups which make some GPOs are going wrong. Also, im getting errors again with sysvolcheck. .. i was in the understanding this was resolved.. but im but off with all info, very buzy at the office atm. samba-tool ntacl sysvolcheck ERROR(<class