problem with GPO Policy after rename

David Mulder dmulder at
Tue Jan 31 14:49:37 UTC 2023

On 1/30/23 11:46 PM, itdept_head via samba-technical wrote:
> Samba 4.14.4
> Migrated a domain. with a  Rename.
> The domain is up and resolving correctly and logs in etc. (seems to function totally correctly)
> As stated in documents the GPO point to the old domain.
> Old:
> New:
> However this hangs the windows 10  gpmc.msc tool.
> Forest:
> Domains:
> as soon as you select the “” to maintain the tree of users/gpo ,etc you get into an endless loop since  “” cannot be found (also you might not want it referencing the old domain)
> “Domain:”
> “The specified domain either does not exist or could not be contacted.”
> This then puts the MS tools into a tight loop with no cancel options.
> Where is this reference to  “Domain:”. kept in the LDAP.
> Totally deleting the GPO from SYSVOL AND  going into CN=Policies.CN=System. To delete any used GPO links ,  and restarting the  samba does not remove the references.
IIRC, these are kept in 'CN=Policies,CN=System' in ldap. I think the 
objectClass is 'groupPolicyContainer'. I'm just skimming through code to 
see these. You should be able to do a subtree search for 
'(objectClass=groupPolicyContainer)' to find all your GPOs.

David Mulder
Labs Software Engineer, Samba
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at

More information about the samba-technical mailing list