The permissions for this GPO
William Fonseca
william_fonsecaxd at msn.com
Sat Jan 31 17:02:28 MST 2015
I David! Thanks for your help
I tried... and not fix :/ .. I removed ALL permissions in ALL GPO... in security filtering
I run: samba-tool ntacl sysvolcheck
and show:ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory /usr/local/samba/var/locks/sysvol/sefazrr.intranet/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9} O:DAG:DAD:PAR(A;OICI;0x001200a9;;;ED)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU) does not match expected value O:DAG:DAD:PAR(A;OICI;0x001200a9;;;ED)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;;;;AU)(A;OICI;0x001200a9;;;AU) from GPO object File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/ntacl.py", line 249, in run lp) File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1695, in checksysvolacl direct_db_access) File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1646, in check_gpos_acl domainsid, direct_db_access) File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1593, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl))
> Date: Sat, 31 Jan 2015 15:14:43 -0800
> Subject: Re: The permissions for this GPO
> From: rivera.david87 at gmail.com
> To: william_fonsecaxd at msn.com
> CC: samba-technical at lists.samba.org
>
> I've fixed this before by removing authenticated users group and then
> adding the group again.
> On Jan 31, 2015 1:51 PM, "William Fonseca" <william_fonsecaxd at msn.com>
> wrote:
>
> > HI everybody
> >
> >
> > When I first open any policy, I get the following:
> >
> >
> > "The permissions for this GPO in the SYSVOL folder are inconsistent with
> > those
> >
> > in Active Directory. It is recommended that these permissions be
> > consistent.
> >
> > To change the SYSVOL permissions to those in Active Directory, click OK."
> >
> >
> > So I click OK. But when I click on a GPO(ALL GPO) show again:
> >
> > "The permissions for this GPO in the SYSVOL folder are inconsistent with
> > those
> >
> > in Active Directory. It is recommended that these permissions be
> > consistent.
> >
> > To change the SYSVOL permissions to those in Active Directory, click OK."
> >
> >
> > I run:
> > samba-tool ntacl sysvolresetbut not fix the problem...
> >
> > help-me fix this..
> >
> > my version samba: samba-4.1.3
> >
More information about the samba-technical
mailing list