similar to: GPO ACL

Hi, Search on the net but not getting enough information to resolve the issue. As per suggestion to check the sysvol but mine got issues. Currently using CentOS 8.1.1911 and a compiled samba 4.11.4 based on Fedora 31. I tried also to delete the broken GPO policy E4108E65-68AB-4E2D-9A00-A9063B1558E3 but I can't delete it (using samba-tool gpo del {31B2F340-016D-11D2-945F-00C04FB984F9}

On my small, one DC AD setup, where I just followed the wiki and did not (!) make any other changes except for working on the AD through the RSAT, I ran samba-tool ntacl sysvolcheck and got the following output: --------------------snip-------------------- ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory

On Sun, Oct 25, 2020 at 4:02 PM Rowland penny via samba <samba at lists.samba.org> wrote: > What do you mean by 'working domain' and 'non-working domain' ? > Do you have two domains ? Different sites, different companies, not related. The working one was also a classic upgrade but earlier on, pre 4.6.x. Just using it to compare. > I am also trying to understand why

Hi all, We'er running a classicupgraded samba4 AD 4.1.6 sernet for a month or two now, and all is very well. :-) It has been classicupgraded using the same 4.1.6. Today I wanted to try GPO's and they are not applied. GPUpdate /force tells me: "Windows attempted to read the file blahblah\gpt.ini from a domain controller and was not successful". Taken from the mailinglist, I

Hi, Do you have any specific error message in Windows events log concerning GPO? Regards Le 24/07/2016 à 05:40, Min Wai Chan a écrit : > Dear All, > I've recently upgrade from samba 4.1.x to samba 4.2.14 and found that GPO > are having issue > > Specifically when I'm adding new using they *never *got the gpupdate > success fully. > > When I run samba-tool ntacl

On Thu, 24 Aug 2017 12:03:42 +0200 Sven Schwedas via samba <samba at lists.samba.org> wrote: > > root at graz-dc-1b:~# samba --version > > Version 4.5.8-Debian > > root at graz-dc-1b:~# samba-tool ntacl sysvolreset && echo "no error" > > no error > > root at graz-dc-1b:~# samba-tool ntacl sysvolcheck > > ERROR(<class

On 25/10/2020 20:20, Sonic wrote: > On Sun, Oct 25, 2020 at 4:02 PM Rowland penny via samba > <samba at lists.samba.org> wrote: >> What do you mean by 'working domain' and 'non-working domain' ? >> Do you have two domains ? > Different sites, different companies, not related. The working one was > also a classic upgrade but earlier on, pre 4.6.x. Just

I'm not sure what are you deatiling, is a bug in progress taht can cause this random problems with some gpos or this error can be ignored? 2016-07-21 20:37 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: > Hi, > > First of all thanks for you answer, it seems that this can help, now some > change made to gpo are applied and we are not receiving error in event > viewer,

Dear All, I've recently upgrade from samba 4.1.x to samba 4.2.14 and found that GPO are having issue Specifically when I'm adding new using they *never *got the gpupdate success fully. When I run samba-tool ntacl sysvolcheck or samba-tool ntacl sysvolreset But don't seem to got it fix.. Any suggestion? Thank in advance. #samba-tool ntacl sysvolcheck Processing section

I have upgraded Samba from a NT PDC to an AD DC about a week ago. Everything went pretty well until today. I've already configured about 25 GPO's (through RSAT on a Windows 10 machine) - but when I came to add more GPO's - it wouldn't let me with the above error message. My specs are: Samba 4.5.0 Slackware -current 64bit Kernel 4.4.20 The client machine is a Windows 10 Pro.

Hi, That's look more like a gpupdate output than an event log entry :-) Le 24/07/2016 à 20:46, Min Wai Chan a écrit : > Hello Sébastien Le Ray, > > The PC reply the following... > > The processing of Group Policy failed. Windows could not resolve the user > name. This could be caused by one or more of the following: > a) Name Resolution failure on the current domain

Hi everyone. I ran into notorios gpo error on windows clients. When I go to my dc controller and run samba-tool ntacl sysvolcheck I get an error: ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory /usr/local/samba/var/locks/sysvol/tsnr.mtt/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}

On Thu, 24 Aug 2017 12:41:36 +0200 Sven Schwedas via samba <samba at lists.samba.org> wrote: > On 2017-08-24 12:27, Rowland Penny via samba wrote: > > On Thu, 24 Aug 2017 12:03:42 +0200 > > Sven Schwedas via samba <samba at lists.samba.org> wrote: > > > >>> root at graz-dc-1b:~# samba --version > >>> Version 4.5.8-Debian > >>>

On 7/22/2016 3:37 AM, Rowland penny wrote: > On 21/07/16 22:18, Trenta sis wrote: >> I'm not sure what are you deatiling, is a bug in progress taht can cause >> this random problems with some gpos or this error can be ignored? >> >> 2016-07-21 20:37 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: >> >>> Hi, >>> >>> First of all

Hello, i configured group policy via RSAT in my samba 4.1.13 implementation the policy applies correctly to my windows 7 clients but not to my windows XP clients. when i run gpupdate /force in windows XP it replies that the policies are apply correctly .... when i run ./samba-tool ntacl sysvolcheck ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception -

Hi, guys! Have some trouble with adding a new GPO. If i add a new GPO it says me "The parametr is incorrect" I use RSAT on win7. I have an AD DC based on samba 4.1.14 on FreeBSD 10.1 Evrything else working fine/ Here is my smb.conf # Global parameters [global] workgroup = DEVCOM realm = DEV.COM.UA netbios name = WIZARD server role = active directory domain controller #server services =

Can anyone explain what is happening when I run / usr / local / samba / bin / samba-tool ntacl sysvolcheck it and an error? ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO file /usr/local/samba/var/locks/sysvol/tdsfs01.net/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/USER/Scripts/scripts.ini

Hi all, I'm afraid I'm back to my old issue of GPO permissions. I have two ADDCs providing an AD Domain (internal.stmaryscollege.co.uk (short-name 'SMC')). Servers are called 'ad-01' and 'tainan'. ad-01 is 'Version 4.0.10' and tainan is 'Version 4.1.0rc4' (the latest version in the package repos of the respective OSs (arch and gentoo)) I have

Hello, this is a Samba AD Domain upgraded from Samba 3.x with classicupgrade. Debian 9.4 Samba: 4.7.6 (packages from tranquil.it) # cat /etc/samba/smb.conf [global] netbios name = DC1 realm = IWW.LAN server role = active directory domain controller workgroup = IWW idmap_ldb:use rfc2307 = yes dns forwarder = 172.16.1.12 dsdb:schema update

Hello all, I have recently discovered that my user cannot edit GPO's anymore. Every GPO I try to open, gets me the famous window "*The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory" * and then I get another window saying "Access is denied". I believe that this happened when I upgraded to 4.1.7 from 4.1.3, about 3 weeks ago,