Corrupted GPO

[George Lazar]

Matthieu Patou-7 wrote:
> 
>   Hi Georges,
> 
>>>> Regarding the output, the GPO I was creating when I started to receive
>>>> "there is not enough space" is record no. 13... (Themes Enabled GPO)
>>>>
>>>> The content of /usr/local/samba/var/locks/.. doesn't seems not unusual.
>>>> I
>>>> have there all the policies owned by 3000008 as before.
>>> Yes but I need it to see if all the policy object declared in the
>>> Policies container are also here on the filesystem.
>>>
>>> See attached policies.png
>>>
>>> More specifically can you show the content of
>>> {391F2562-1AB9-4CA5-BC87-4BD72929CC5E} folder ?
>>> Can you access
>>> \\domain.eu\SysVol\domain.eu\Policies\{391F2562-1AB9-4CA5-BC87-4BD72929CC5E}
>>> ?
>>> Do you see a file called gpt.ini and two folders MACHINE and USER ?
>>> If no can create the folder and the file with the following content:
>>> [General]
>>> Version=65543
>>>
>>> See attached policy.png http://old.nabble.com/file/p29022853/GPO.JPG
>>> GPO.JPG  http://old.nabble.com/file/p29022853/polcies.PNG polcies.PNG
>>> http://old.nabble.com/file/p29022853/policy.PNG policy.PNG
> It's the fist time I see such things but I'm not the most experienced 
> with gpo.
> 
> Ok let's try to nuke the GPO:
> do a tdbbackup on all the ldb files in /usr/local/samba/private then
> 
> Done.
> 
> ldbedit -H ldap:/localhost -b 
> CN={391F2562-1AB9-4CA5-BC87-4BD72929CC5E},CN=Policies,CN=System,DC=domain,DC=eu 
> 
> You should have three objects, remove them.
> 
> It doesn't let me delete them, I got:
> failed to delete
> CN={391F2562-1AB9-4CA5-BC87-4BD72929CC5E},CN=Policies,CN=System,DC=domain,DC=eu
> - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS -  <00002098: insufficient
> access rights> <>
> 
> I'm doing this as root but should I stop samba first?
> 
> Thanks!
> 
> 
> Restart gpmc: gpmc.msc.
> 
> Let us know !
> 
> 
> -- 
> Matthieu Patou
> Samba Team        http://samba.org
> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Corrupted-GPO-tp29020398p29024429.html
Sent from the Samba - samba-technical mailing list archive at Nabble.com.