similar to: GPO / Sysvol problems

RPvs> On Wed, 23 Jan 2019 10:06:52 -0800 RPvs> Gregory Sloop via samba <samba at lists.samba.org> wrote: >> RPvs> Have you read this: >> RPvs> https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles >> RPvs> and possibly, this: >> RPvs> https://wiki.samba.org/index.php/Configuring_Windows_Profile_Folder_Redirections >> RPvs>

So, some updates. I started that email a couple of hours ago - but suddenly, without changing a thing, the test client/station is suddenly now getting the correct GPO details. Yet, I've not synced the sysvol or done anything to change or update the GPO on either DC. See inline... RPvs> On Wed, 23 Jan 2019 08:40:55 -0800 RPvs> Gregory Sloop via samba <samba at lists.samba.org>

RPvs> On Wed, 23 Jan 2019 09:17:33 -0800 RPvs> Gregory Sloop via samba <samba at lists.samba.org> wrote: >> So, some updates. >> I started that email a couple of hours ago - but suddenly, without >> changing a thing, the test client/station is suddenly now getting the >> correct GPO details. >> Yet, I've not synced the sysvol or done anything to

Hi Mark, See below. ;-) > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mark > Foley via samba > Verzonden: woensdag 13 juni 2018 22:50 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Admin UID changed with upgrade to 4.8.2 > > On Wed, 13 Jun 2018 08:50:00 +0200 "L.P.H. van Belle wrote: > > >

On 22/06/16 13:44, lingpanda101 at gmail.com wrote: > On 6/22/2016 8:19 AM, L.P.H. van Belle wrote: >> And dont forget : >> https://wiki.samba.org/index.php/Idmap_config_ad >> >> I also noticed and incorrect mapping, which "looks" like rights >> issues like in the thead here. ( it is imo not a right issue.. ) read >> on.. >> >>

On Sun, Oct 25, 2020 at 3:31 PM Rowland penny via samba <samba at lists.samba.org> wrote: > OK, if you look at the end of the permissions, there is a '+' sign, this > shows that extended acls set, to see these: > > getfacl /usr/local/samba/var/locks/sysvol The difference in acls is that the non-working domain includes: user:3000001:r-x user:3000002:rwx user:3000003:r-x

On 6/22/2016 8:19 AM, L.P.H. van Belle wrote: > And dont forget : > https://wiki.samba.org/index.php/Idmap_config_ad > > I also noticed and incorrect mapping, which "looks" like rights issues like in the thead here. ( it is imo not a right issue.. ) read on.. > > NTDOMAIN\enterprise read-only domain controllers:x:3000202: > NTDOMAIN\domain

And what i dont see,, what is your "current" smb.conf ? Greetz. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > lingpanda101 at gmail.com > Verzonden: woensdag 22 juni 2016 15:09 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Rights issue on GPO > > On 6/22/2016 8:51 AM, Rowland penny wrote:

RPvs> Have you read this: RPvs> https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles RPvs> and possibly, this: RPvs> https://wiki.samba.org/index.php/Configuring_Windows_Profile_Folder_Redirections RPvs> Rowland Yes, and I believe I've done everything properly. That's where I started. So I think we're back to; What items control file/directory creation

On Wed, 20 Jun 2018 12:05:13 +0200 L.P.H. van Belle wrote: > > As said very busy, but i can spare a few minutes now. > > -rwxrwxr-x+ 1 3000000 domusers 2240 2018-06-18 17:33:55 /var/lib/samba/sysvol/hprs.local/policies/{3C103F7B-7250-4610-BC45-8B06353CAA7C}/User/Documents & Settings/fdeploy1.ini > -rwxrwx---+ 1 3000000 users 64 2018-06-18 17:34:22

>> https://wiki.samba.org/index.php/Idmap_config_ad Dont we need idmap config in the smb.conf also, or is above not used anymore, if so the we must change the wiki. Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > lingpanda101 at gmail.com > Verzonden: woensdag 22 juni 2016 15:37 > Aan: samba at

Hai, the steps are (basily) good, only this one can be better.   >To solve, I executed the following commands: >Chown 10060: 30028 -R sysvol >Chmod 775 -R sysvol   If you use acl_xattr:ignore system acls = yes on the sysvol share, you must configur the share from withing windows.  (* or use smbcalcs , but i never used it. )   This is what i see:   ls -al  sysvol total 24 drwxrwx---+ 3

Hai, ? im running samba 4.2.2 sernet on debian. ? when i run : samba-tool gpo aclcheck -UAdministrator ? im getting : ERROR: Invalid GPO ACL O:DAG:DAD:PAI(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) and it tells me it should be O:DAG:DAD:P?

Hello Luis tomorrow i'm not in office, reply to you thursday One question : who is owner and whats rights for dir     /home     /home/samba     /home/samba/sysvol because, from windows client, user into domain admins, when i change in security tab, explorer always crash bye Il 06/11/2018 17:16, L.P.H. van Belle via samba ha scritto: > Ok, next, > > From a windows pc connect to

Hai, Ok, i expected a bit different outputs. On my DC, i use /home/samba/sysvol and /home/samba/netlogon. This is what i expected. getfacl /home/samba/ getfacl: Removing leading '/' from absolute path names # file: home/samba/ # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx group::rwx group:BUILTIN\134administrators:rwx

I have two domain controller servers, with samba in version 4.18 On both DCs both the Sysvol share and the subdirectories (including GPOs) have the same permission: getfacl /usr/local/samba/var/lib/samba/sysvol # file: usr/local/samba/var/lib/samba/sysvol # owner: root # group: 3000000 user::rwx user:root:rwx user:3000000:rwx user:3000001:r-x user:3000002:rwx user:3000003:r-x group::rwx

On 25/10/2020 19:44, Sonic wrote: > On Sun, Oct 25, 2020 at 3:31 PM Rowland penny via samba > <samba at lists.samba.org> wrote: >> OK, if you look at the end of the permissions, there is a '+' sign, this >> shows that extended acls set, to see these: >> >> getfacl /usr/local/samba/var/locks/sysvol > The difference in acls is that the non-working

On 20/02/15 21:27, Davor Vusir wrote: > > Rowland Penny skrev den 2015-02-19 18:15: >> OK, there is a discussion over on samba-technical about nss_winbind >> and the question about Administrator being mapped to 0 was raised. >> Now I have always thought that it should, but in fairness, I decided >> to see what happens when it isn't, so I removed Administrator

Ok, next, >From a windows pc connect to the server with computer manager, and now setup the share and folder rights. As in shown in the link posted ( https://lists.samba.org/archive/samba/2018-February/213690.html ) m leaving the office. So a reply wil probley tomorrow. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org]

hello > One question : who is owner and whats rights for dir > /home drwxr-xr-x.   5 root root   49  6 nov 16.21 home > /home/samba drwxr-xr-x. 3 root root  20  6 nov 16.21 samba > /home/samba/sysvol drwxrwx---+ 4 root root 52  8 nov 12.47 sysvol > > because, from windows client, user into domain admins, when i change > in security tab, explorer always crash > > bye