Samba4 sysvol directory permissions?

[Jeff Sadowski]

Thinking about it further I'd still like to know how to set
permissions on active directory folders like sysvol correctly.
Its something with smb.conf file I'm not sure of all the options for it.
for now I changed it so that sysvol is readonly for now. I'd like to
set permissions that are more appropriate.
Looking at an older smb.conf file I saw an option to increase logging
and I set my logging up a bit to log level 5
what level would I need that I could perhaps see what computer is
trying to write the below files.

On Wed, Sep 21, 2011 at 10:01 AM, Jeff Sadowski <jeff.sadowski at gmail.com> wrote:
> I realized this morning that my samba machines sysvol had stuff in it
> that was not on my windows2003 DC. It had viruses in its sysvol that
> I'd like to prevent what ever is putting them there from putting them
> there.
>
> I have that virus that puts the following files
> autorun.inf
> pornmovs.lnk
> myporno.avi.lnk
> setup50045.fon
> setup50045.lnk
>
> I'm not sure where the infection is but how do I determine permissions
> for sysvol on my samba4 server?
> So that I may be able to lock it down?
>