S4/AD gpo problem

[Matthieu Patou]

>>   4) xattr operations could be failing on the [sysvol] share. Do you
>>   have xattrs enabled in the filesystem, or do you have the posix:eadb
>>   option set? Can you see/modify ACLs OK on [sysvol] from Windows?
>>      
> This may be it, i havnt xattr in fstab, how do you set the posix:eadb thing?
> Well i can the acls is not working 100%, some dirs i can change, but some i cant.
> And in some dirs you se some users named like S-1-22-1-506.
>
>    
When did you provision your installation ?

Can you try this:
<path_to_samba>/net acl get --as-sddl 
/<path_to_your_provision>/sysvol/test.local/Policies/{1977E949-B026-4FB5-A891-865E3E78C36C} 
-s /<path_to_your_provision>/etc/smb.conf



Matthieu