similar to: SYSVOL ACLs and GPOs

On Wed, 30 Aug 2023 09:49:05 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > > On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: > >> On 27.08.2023 23:45, Andrew Bartlett wrote: > >>> On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >

On 30.08.2023 11:58, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 09:49:05 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 29.08.2023 21:38, Andrew Bartlett via samba wrote: >>> On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: >>>> On 27.08.2023 23:45, Andrew Bartlett wrote: >>>>>

On Wed, 30 Aug 2023 12:40:08 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 30.08.2023 11:58, Rowland Penny via samba wrote: > > On Wed, 30 Aug 2023 09:49:05 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > >>>

On 30.08.2023 16:21, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 12:40:08 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 30.08.2023 11:58, Rowland Penny via samba wrote: >>> On Wed, 30 Aug 2023 09:49:05 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> On

On Wed, 30 Aug 2023 18:56:48 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 30.08.2023 16:21, Rowland Penny via samba wrote: > > On Wed, 30 Aug 2023 12:40:08 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 30.08.2023 11:58, Rowland Penny via samba wrote: > >>> On

On 30.08.2023 19:17, Rowland Penny via samba wrote: > On Wed, 30 Aug 2023 18:56:48 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 30.08.2023 16:21, Rowland Penny via samba wrote: >>> On Wed, 30 Aug 2023 12:40:08 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> On

Hi! I have recently upgraded samba4 to the latest GIT build. I have run upgradeprovision according to upgrading-samba4.txt instructions. All seems to be well, but when i try to access Group Policy Objects from gpmc utility on windows i get the following error message: --------------------------- Group Policy Management --------------------------- The permissions for this GPO in the SYSVOL folder

On 29.08.2023 21:38, Andrew Bartlett via samba wrote: > On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: >> On 27.08.2023 23:45, Andrew Bartlett wrote: >>> On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >>>> Hi folks, >>>> I just wonder why it is not possible to set domain password >>>> policieswith GPO,

> I wonder if this has the same cause as this bug: > https://bugzilla.samba.org/show_bug.cgi?id=11351 Well, I already came across this bug report as my GPMC shows the same error on "Status" tab of the domain. Though I didn't join ainy Windows domain controller to the Samba domain. I am running GPMC on my local Windows 10 Pro machine joined to the domain. It shows "No

On Tue, 2023-08-29 at 12:58 +0200, Peter Milesson via samba wrote: > On 27.08.2023 23:45, Andrew Bartlett wrote: > > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: > > > Hi folks, > > > I just wonder why it is not possible to set domain password > > > policieswith GPO, using the Windows RSAT Group Policy Manager? > > > For

Hello all, I installed Samba4 from GIT (alpha 16, it says) and while most functionality is operational, GPMC continues to report an error in permissions, claiming the permissions for the GPO are inconistant with that of Active Directory. I can't correctly implement GPOs due to this, since only parts of the GPO (if at all) are actually updated on machines (WInXP SP3). Thanks for any input on

Hi all, I'm afraid I'm back to my old issue of GPO permissions. I have two ADDCs providing an AD Domain (internal.stmaryscollege.co.uk (short-name 'SMC')). Servers are called 'ad-01' and 'tainan'. ad-01 is 'Version 4.0.10' and tainan is 'Version 4.1.0rc4' (the latest version in the package repos of the respective OSs (arch and gentoo)) I have

Here are my (little) view regarding shares accesses. I write that to clarify things. And it could really be of-topic as Louis seems to have gave solution. There are 2 levels of authorisation for accessing shares: the share level and FS level. For Sysvol I would keep everyone or replace it by "authenticated users" in paranoid mode as the latter refuse non-authenticated users. They are

> root at graz-dc-1b:~# samba --version > Version 4.5.8-Debian > root at graz-dc-1b:~# samba-tool ntacl sysvolreset && echo "no error" > no error > root at graz-dc-1b:~# samba-tool ntacl sysvolcheck > ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory

On 27.08.2023 23:45, Andrew Bartlett wrote: > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >> Hi folks, >> >> I just wonder why it is not possible to set domain password policies >> with GPO, using the Windows RSAT Group Policy Manager? For most >> other >> settings, using GPOs through RSAT works. >> >> For somebody who sets

On 17/11/15 16:57, Viktor Trojanovic wrote: > Hi Mathias, > > Thanks for replying. It seems you're describing the situation on the > AD DC. Computer and user mode access to my DC works fine and without > any issues but I can't access the shares of my *member* server *in > computer mode*. In user mode, it all works just fine. > > Viktor > > On 17.11.2015

Let me guess. You accessing your server like : \\servername\netlogon of \\servername\sysvol Well thats protected by windows these these days. Try with \\servername.domain.tld\netlogon or \\servername.domain.tld\sysvol Does that work? Yes, There is a whole chaper of this on the list somewhere.. Best is to read howto override this. https://adsecurity.org/?p=1405 and for you

Hello list, I am not sure if this is a bug or known already but I will describe it. I have two domain controllers running on 4.1.12/sernet which are linked together. I am using unison for bidirectional sync for the sysvol directory as described on samba's wiki, although in my opinion the problem I will describe in the following has nothing to do with the sync process. The sync occurs every

> Hello Felix, > > Sorry for the very late answer, > > Well I remade a test today, in gpmc.msc (group policy management console), I have no errors from Windows about the ACLs of the folders for my policies. Thanks a lot for your answers, Matthieu and Christopher. It makes me happy to know that you guys don't forget to answer the questions of samba users. My first solution was

Hi all, There has been some discussion on GPO's lately, and I find myself having a problem too. This error in logged on one of our win7 workstations: EventData SupportInfo1 2 SupportInfo2 1232 ProcessingMode 1 ProcessingTimeInMilliseconds 1638 ErrorCode 5 ErrorDescription Access is denied. DCName \\dc4.samba.company.com GPOCNName