[Samba] Fwd: GPO's in OU's not working

[Ricky Nance]

Try a GPO that does something more 'simple' like locking out the control
panel for a computer and place that in the ou you are having issues with,
maybe its just an issue with your redirect.


On Thu, Feb 27, 2014 at 10:21 AM, Joe Maloney <jmaloney at pcbsd.org> wrote:

> ---------- Forwarded message ----------
> From: Joe Maloney <jmaloney at pcbsd.org>
> Date: Thu, Feb 27, 2014 at 10:21 AM
> Subject: Re: [Samba] GPO's in OU's not working
> To: Ricky Nance <ricky.nance at gmail.com>
>
>
> Thanks for the gpresult tip to output the info.  I was aware of gpresult
> but not how to dump the info.  I did try samba-tool ntacl sysvolcheck after
> creating my first OU and linked GPO.  In fact sysvolcheck showed an error
> so I ran sysvolreset, sysvol check again.  After that the error was gone
> but still GPO's are not yet working in OU.
>
> Joe Maloney
>
>
> On Thu, Feb 27, 2014 at 9:04 AM, Ricky Nance <ricky.nance at gmail.com>
> wrote:
>
> > There are a couple of things to check. First I'd do (from a windows
> command
> > prompt) "gpresult /h out.html && start out.html" (without the " marks),
> to
> > see if the computer is seeing that is should be in a certain OU. Next on
> > the samba box do a samba-tool ntacl sysvolreset (I think that is the
> right
> > command I don't have a samba box here at work to check on, someone
> correct
> > me if its not), this will reset all the ACL's on sysvol to default, which
> > should in turn let your clients work as expected. Also it wouldn't hurt
> to
> > check on the windows box and make sure you have the correct DNS servers
> set
> > (they need to be set to your AD DC ip).
> >
> >
> > On Thu, Feb 27, 2014 at 2:48 AM, Michał Półrolniczak <
> > michal.polrolniczak at warp.org.pl> wrote:
> >
> > > we are running 4.1.4
> > > and there is no problem with GPO for users/computer in OU.
> > > are your gpo are configured for Authenticated Users?
> > >
> > > PS. we having problems with dns, but not with GPO - sometimes GPO ain't
> > > refresh on clients because dns dont resolve domain name allways. But
> > > still when it dose resolve name gpo work lika a charm
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  https://lists.samba.org/mailman/options/samba
> > >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>