similar to: Samba4 ADC cannot edit GPO with W2K3

Hello, we have a strange problem with the "Default Domain Policy". Sometimes on different PC the drivmappings are not working. When we do a "gpupdate /force" we get an errormessage that the "default domain policy" is not working for both the user-GPOs and the machine-GPOs. We checked the permissions with "samba-tool ntacl sysvolcheck" and with

Hi I have created a new DC on the Ubuntu 16.04 with the latest sernet samba 4.7.0 package. After joining to the PDC running 4.6.8 package I backed up the idmap.ldb file and copied to the new DC. When I run the samba-tool ntacl sysvolreset command on the new DC to replicate GID Mappings it fails with the below error: open: error=2 (No such file or directory) ERROR(runtime): uncaught exception -

On 21/07/16 22:18, Trenta sis wrote: > I'm not sure what are you deatiling, is a bug in progress taht can cause > this random problems with some gpos or this error can be ignored? > > 2016-07-21 20:37 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: > >> Hi, >> >> First of all thanks for you answer, it seems that this can help, now some >> change

Hi, I have migrated samba 3 domain to samba, and I have found that when you try to use gpo this are not applied we receive in windwos event log errors with permissions in sysvol, I have checked paths to sysvol gpos and are correct. Also I have tried with a new fresh domain (not migrated) and with this new install works GPO How can I debug this problems and find a solution? Thanks

Hello thank you for you response: I would not like to give up.I'll try to see if I can change my domain to the correct dns structure , maybe then I could be migrated to samba4 2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at de.reuver.org>: > Looks like Windows also does not support single label dc's anymore, see > http://support.microsoft.com/en-us/kb/300684 for the

Hi, First of all thanks for you answer, it seems that this can help, now some change made to gpo are applied and we are not receiving error in event viewer, but seem that some change are not applied, why and where I can find some information, in samba log anv event viewer any error is reported Also I have tried # samba-tool ntacl sysvolreset After this tried # samba-tool ntacl sysvolcheck

> On 04 Jun 2016, at 22:14, Miguel Medalha <medalist at sapo.pt> wrote: > > >> Can someone therefore please explain to me what exactly these GPO >> restrictions are that Samba can't handle? I'd also appreciate if someone >> could list which other GPO I cannot set successfully using RSAT. > > It seems to me that the FAQ is pretty clear. The

Hi Dania, > Hello thank you for you response: > > I would not like to give up.I'll try to see if I can change my domain > to the correct dns structure , maybe then I could be migrated to > samba4 you can do a domain rename on the win2k3 before switching to samba. But then you will have an issue with the AD Epoch [1] as it will be incremented to 1, and that is not supported

dont chown, dont run samba-tool ntacl sysvolreset. just fix the rights from windows and test. if the win event log is ok, then dont touch sysvol again, only setup/change gpo's. if gpos dont work, what is the event id and error message. greetz, Louis ps im sick and only mail available so im bit slow in responce. > Op 8 jul. 2017 om 10:42 heeft Stefan G. Weichinger via samba

Hello, I'm having one strange issue with latest stable Samba 4.0.4. I'm testing it as a domain controller for two virtual machines. The Samba AD DC is Debian stable, with two domain members - Windows XP Pro and trial Windows 8 Enterprise. User configuration using GPOs is working as expected. However, Computer configuration is never applied properly. Event logs show this entry: ------

I've been trying to setup Samba to authenticate users against accounts existing on a Windows 2003 Server without any backwards capability. Ideally, this needs to be done without any changes to the Windows 2003 Server. Users will not be logging into the Samba shares at all. This is merely for authentication. I'm running FreeBSD 4.10-Relase #4 with Samba 3.0.8. This is my smb.conf file:

I'm trying to integrate a Linux machine into our Win2K3 ADS-based network. The machine must primarily serve as a user workstation (i.e., a Samba Client), although it also needs to serve at least one share for backup purposes. I'd like to emulate the behavior of our WinXP machines in that any user in our small company can login to any computer in the domain based on network

On Tue, 6 Feb 2018 15:03:16 -0400 Robert Marcano via samba <samba at lists.samba.org> wrote: > Thanks for the information, to use a default GPO was a simple way to > try to encourage someone to reproduce the problem. > > I already created new GPOs (this is a test domain) Using the default > filter for a new GPO, "Authenticated users", creating a new group for

Hi All, First, off I'm a bit of a n00b w/Samba4 so I'll apologize ahead of time if any of this seems obvious/trivial. I'm working with Samba RC1 tar build and trying to get DNS replication working. Right how I get the following under --snip-- ==== KCC CONNECTION OBJECTS ==== Connection -- Connection name: fa253d86-3549-4208-ab29-a0d702ccdb02 Enabled : TRUE Server DNS name

Hello all, some time ago I've posted on samba.internals but did get no answer to my question. I hope that someone on this list can give me some help. I have migrated a Win2k AD to samba4 and copied SYSVOL as decribed in this post: https://lists.samba.org/archive/samba-technical/2011-October/080026.html Now I have the problem that only the builtin Administrator can sucessfull modify/add

I have samba 4.3 running on FreeBSD 10.2 on ZFS and I am unable to create new GPOs, getting "invalid Parameter" response.Log files indicate ACL issues. Domain was provisioned with --use-ntvfs option.Filesystem is mounted with this options:zroot/ROOT/default on / (zfs, local, noatime, nfsv4acls) acl options on zfs are this:zroot/ROOT/default aclmode passthrough inherited from

Are there any gotcha's..... I am currently using winbindd and very successfully integrating my Samba boxes with the NT4 domain structure. The admin who is doing the migration (A corporate person not used to Linux at all) is already nervous about the migration since it involves Linux. Usernames are not supposed to change..but, the authentication domain is going to be a completely new

On 24/08/17 12:57, Marc Muehlfeld via samba wrote: > Hello Christian, > > Am 24.08.2017 um 11:36 schrieb Christian Naumer via samba: >> Has anyone found a workaround for Samba print servers? >> >> https://social.technet.microsoft.com/Forums/en-US/030ee94a-047d-460a-bc39-52351a199364/kb31639 >> 12-breaks-point-and-print-restrictions-gpo-settings >> >>

Has anyone found a workaround for Samba print servers? https://social.technet.microsoft.com/Forums/en-US/030ee94a-047d-460a-bc39-52351a199364/kb31639 12-breaks-point-and-print-restrictions-gpo-settings If I set the GPOs as stated on the WIKI (https://wiki.samba.org/index.php/Setting_up_Automatic _Printer_Driver_Downloads_for_Windows_Clients) Windows 10 refuses to install the driver with "a

Hi all I just installed the the ADMX-fils for the Linux-GPOs. IBut when I look at the Group Policy Editor below "samba" I only see "Unix Setting -> Scripts". "smb.conf", "Messages", "sudo-files" are missing. If I take a look at the admx-file itself all the options are in the file. I uses Sernet Samba 4.18.4 on Debian 12 I already did a