[Samba] samba4, GPO and SYSVOL permissions errors

[Leo Lutz]

I'm getting an interesting problem. I can create/rename/delete/edit policies,
but I can't change the security filtering or delegation settings.

When I first open any policy, I get the following:

"The permissions for this GPO in the SYSVOL folder are inconsistent with those
in Active Directory. It is recommended that these permissions be consistent.
To change the SYSVOL permissions to those in Active Directory, click OK."

So I click OK and I get "Access is denied."

The error I get in samba.log follows:

[Wed Jan  5 18:34:18 2011 PWT, 0
../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
../ntvfs/posix/pvfs_acl.c:567 denied access to 
'/var/lib/samba/sysvol/pcd.example.com/Policies/
{3D1F2B0A-B0F7-44C1-BA1A-2C5D03DFC0ED}' - 
wanted 0x00060000 but got 0xfef3ffff (missing 0x00040000)

How do I fix this?

cheers!
Leo