The permissions for this GPO

[William Fonseca]

I David! Thanks for your help

I tried... and not fix :/ .. I removed ALL permissions in ALL GPO... in security filtering 
I run: samba-tool ntacl sysvolcheck
and show:ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory /usr/local/samba/var/locks/sysvol/sefazrr.intranet/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9} O:DAG:DAD:PAR(A;OICI;0x001200a9;;;ED)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU) does not match expected value O:DAG:DAD:PAR(A;OICI;0x001200a9;;;ED)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;;;;AU)(A;OICI;0x001200a9;;;AU) from GPO object  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run    return self.run(*args, **kwargs)  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/ntacl.py", line 249, in run    lp)  File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1695, in checksysvolacl    direct_db_access)  File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1646, in check_gpos_acl    domainsid, direct_db_access)  File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1593, in check_dir_acl    raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl))


> Date: Sat, 31 Jan 2015 15:14:43 -0800
> Subject: Re: The permissions for this GPO
> From: rivera.david87 at gmail.com
> To: william_fonsecaxd at msn.com
> CC: samba-technical at lists.samba.org
> 
> I've fixed this before by removing authenticated users group and then
> adding the group again.
> On Jan 31, 2015 1:51 PM, "William Fonseca" <william_fonsecaxd at msn.com>
> wrote:
> 
> > HI everybody
> >
> >
> > When I first open any policy, I get the following:
> >
> >
> > "The permissions for this GPO in the SYSVOL folder are inconsistent with
> > those
> >
> > in Active Directory. It is recommended that these permissions be
> > consistent.
> >
> > To change the SYSVOL permissions to those in Active Directory, click OK."
> >
> >
> > So I click OK. But when I click on a GPO(ALL GPO) show again:
> >
> > "The permissions for this GPO in the SYSVOL folder are inconsistent with
> > those
> >
> > in Active Directory. It is recommended that these permissions be
> > consistent.
> >
> > To change the SYSVOL permissions to those in Active Directory, click OK."
> >
> >
> > I run:
> > samba-tool ntacl sysvolresetbut not fix the problem...
> >
> > help-me fix this..
> >
> > my version samba: samba-4.1.3
> >