similar to: gpt.ini

Is possible to store the Group Policy Container (GPC) on a OpenLDAP? Is possible to store the Group Policy Template (GPT) on a Samba share? The idea is to manage windows desktop policies using the new Win200x GPOs without using an Active Directory. Any other hints? Thanks --------------------- Gabriel Acquistapace CaFeLUG (Capital Federal GNU/Linux User Group) Buenos Aires, Argentina

I found this from http://charon.minilab.bdeb.qc.ca/anonym/nt/2000/ads/TTGW2KGP_Vol1through4.pdf I would like to figure out how to do this gpedit.msc+AD+gpc+gpt magic for win2k/xp with linux+samba(2.2/3.0/tng)+openldap and is it possible at all? Thanks. Although GPOs provide significantly more policy features than NT 4.0 System Policy provides, GPOs are stored and processed differently than NT

Are you currently replicating the sysvol folder between DC's? On 3/18/2016 1:23 PM, Sébastien Le Ray wrote: > Hi list, > > Having a multi-DC Samba 4.1.17 (Debian) setup, we use Computer GPOs. > > Machines randomly encounter event 1058 (translation is roughly "GPO > processing failed. Windows failed to read file > \\domain\sysvol\domain\Policies\SomeGUID\gpt.ini

On 3/18/2016 1:32 PM, Sébastien Le Ray wrote: > Hi, > > Yes using rsync followed by a samba-tool ntacl sysvolreset > > Regards > > > Le 18/03/2016 18:29, lingpanda101 at gmail.com a écrit : >> Are you currently replicating the sysvol folder between DC's? >> >> On 3/18/2016 1:23 PM, Sébastien Le Ray wrote: >>> Hi list, >>> >>>

Hi list, Having a multi-DC Samba 4.1.17 (Debian) setup, we use Computer GPOs. Machines randomly encounter event 1058 (translation is roughly "GPO processing failed. Windows failed to read file \\domain\sysvol\domain\Policies\SomeGUID\gpt.ini from a domain controller"). It seems to be an issue with computer account because User's GPO applies nicely. Replication (both drs show

Hi, Yes using rsync followed by a samba-tool ntacl sysvolreset Regards Le 18/03/2016 18:29, lingpanda101 at gmail.com a écrit : > Are you currently replicating the sysvol folder between DC's? > > On 3/18/2016 1:23 PM, Sébastien Le Ray wrote: >> Hi list, >> >> Having a multi-DC Samba 4.1.17 (Debian) setup, we use Computer GPOs. >> >> Machines randomly

Hai, Yeah, you have probely one of these 2 problems. ( or both ) 1) This is probely because your "computer" *(user) does not have any acces. Recheck you permissions on the share and and folders for that specific policie. 2) Connections specific suffic and/or network suffic is wrong. Check if you pc is setup correct with dhcp. Ipconfig /all ( check these, and make sure you have

Ok,   > I don't think so, I launch gpupdate using local admin account, so as I > understand it, only computer account is used (since local admin as no > existence on the domain) Why a local admin, please use a ?domain admin? ..   Test as follow. Open de security tab of the GPT.INI. Advanced settings, last tab, effective settings, At objecttype, deselect all, select

Hai, Today i had a "about" same problem. Check the following. 1) Get the Policy id ( like ": {78732DBF-5381-497B-9B25-00A278270A1F} from PATH_TO_SYSVOL_FOLDER/Policies/ 2) run getfacl on the folder like : getfacl \{78751DBF-5381-497B-9B25-00A278270A1F\}/ here in my case i noticed the following. I had a user set on one specific policie, i changed that users to a newly

Good explanation, makes sense - thank you! I am having a different issue, then, I think - on occasion gpupdate fails (after the machine has been running; not just booted up) but then on occasion it works again (nothing changed as far as I can tell). I'll continue to debug this one as well :) On 18 April 2016 at 17:05, Sébastien Le Ray <sebastien-samba at orniz.org> wrote: > I think

Hi, Thank you for your report. I can confirm that the issue kind of "resolves" itself after a while (the while can be as long as several weeks which is annoying when you install a common base of software through GPO). It seems like one (or several) of the DCs are misconfigured but checking throught ldapcmp returns no difference, and ntacl sysvolreset on all DC doesn't solve it

Sorry for my delayed response, my job has had me out of state for a while. I wanted to add that I am not getting the Kerberos error in my event logs. It just flat out claims that it cannot read gpt.ini for some reason. This happens randomly, whether dc01 or dc02 is the logon server, and the strange part is that most PCs can work fine, but one or two randomly won't. In other words, if pc1 and

I dont read any france but translators work ok. ;-) pfew.. Ok any firewalling on the DC's? if so, open TCP and UDP port 88. Or try short without firewalls on, on the DC's. Other options to try is recude the MaxPacketSize in windows. Looks like a to big package which is rejected. Ow and above is also needed on the DNS port 53. Open tcp and udp. If the upd packages are to big,

Ok, same as im running. DC => (replicated zones) => Slave DNS << == Client pc's. Have you tried to reset the network id manualy from withing windows. ( where you change/add the computer to the network ) The button "change network-id." I have seen these things also with pc's which are wrongly syspreped. Which cases same SID's for the pc's. But

Ok based on the MS link. Have you enabled under Computer Configuration in the navigation tree on the left side, navigate to Administrative Templates\System\Logon Enable "Always wait for the network at computer startup and logon" If not done yet. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Sébastien Le Ray

Ok, try this. Gif the pc a uid and check again. If it works then, its a share or security right. Gpupdate /force works because at that point you "user"/user has a uid and gid. The error occurs at start up because the COMPUTERNAME$ doent have access to that gpt.ini. Resetting sysvol in that case doent help because the right on the gpt.ini is set by the group you assigned to the

Le 18/03/2016 20:58, lingpanda101 at gmail.com a écrit : > On 3/18/2016 2:15 PM, Sébastien Le Ray wrote: >> >> >>> >>> Are you using Item level targeting in your GPO? >>> >> >> No > > When this error happens, can you confirm if you can manually navigate > to the file? Open file explorer and enter the UNC path. > > ie.

I just saw this thread while browsing my emails and I want to report that I get this frequently but randomly on every Samba4 domain I run. It is completely random in that it affects a PC today, but a week from now that same PC may work just fine. It may then affect a different PC which had no issues prior. Also, if I click the link to "gpt.ini" in the event log the file DOES open and I

IPv6 is disabled on all systems where I am having the issue, so it is not a fix here. All systems have a GID, all users have a UID. It fails on startup and when running gpupdate, with or without the force parameter. That is why I am lost. DNS works correctly and I can ping the domain name and it will ping one server or the other. I have reset and checked the sysvol permissions to no avail. It

I think I finally solved it… This is indeed not related to Samba (I guess), and I have to say that I don't know if there is a proper fix Let's recap in case someone take this in the middle of the thread : Some machines fails to apply GPO at startup. Manual launches of gpupdate are successful, only boot up ones fail (that is, everything related to software installation or startup