[Samba] gpo not working

me at electronico.nc me at electronico.nc
Sat Nov 16 15:15:56 MST 2013


Le 17/11/2013 07:24, Ing. Jorge E. Rojas a écrit :
> Hello people:
>
> First, excuse any misspelling, english is not my mother tongue
>
>
> I'm  triying a simple gpo, (group policy object), put a fixed image as 
> wallpaper on all the pc after sucessfully connected to the dc but is 
> not working.
>
> Using the remote administration tool had has defined an Organizational
> Unit with one user and defined a policy with two restrictions
> 1) use a shared image  [ \\dc\common\backgroud.jpg ]  as wallpaper
> 2) disable change of wallpaper by the user
>
> the same restrictions are applied in the default domain policy
>
>
> BUT IS NOT WORKING
>
> Login with a user inside the default Users group or a user from the OU
> created is the same, wallpaper goes with the XP default and not the 
> image i put on \\dc\common\backgroud.jpg
>
> the test is done with a phisical pc as domain member and the server 
> running over a virtual machine  with debian wheezy (proxmox container)
>
> some data for have an idea on scene
>
> #samba -V
> Version 4.2.0pre1-GIT-UNKNOWN
>
> #uname -a
> Linux dc 2.6.32-20-pve #1 SMP Wed May 15 08:23:27 CEST 2013 i686 
> GNU/Linux
>
>
> #samba-tool gpo listall
> GPO          : {31B2F340-016D-11D2-945F-00C04FB984F9}
> display name : Default Domain Policy
> path         :
> \\shop.zone.example.com\sysvol\shop.zone.example.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9} 
>
> dn           :
> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com 
>
> version      : 0
> flags        : NONE
>
> GPO          : {6AC1786C-016F-11D2-945F-00C04FB984F9}
> display name : Default Domain Controllers Policy
> path         :
> \\shop.zone.example.com\sysvol\shop.zone.example.com\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9} 
>
> dn           :
> CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com 
>
> version      : 0
> flags        : NONE
>
> GPO          : {000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60}
> display name : shop01
> path         :
> \\shop.zone.example.com\SysVol\shop.zone.example.com\Policies\{000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60} 
>
> dn           :
> CN={000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com 
>
> version      : 131072
> flags        : NONE
>
> GPO          : {6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC}
> display name : infor1
> path         :
> \\shop.zone.example.com\SysVol\shop.zone.example.com\Policies\{6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC} 
>
> dn           :
> CN={6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com 
>
> version      : 65536
> flags        : NONE
>
>
> besides there is a strange error with aclcheck
>
> # samba-tool gpo aclcheck
> ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such 
> element'
>   File
> "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
> line 175, in _run
>     return self.run(*args, **kwargs)
>   File 
> "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/gpo.py",
> line 1150, in run
>     ds_sd_ndr = m['nTSecurityDescriptor'][0]
>
>
Hello
What does a
gpupdate /force
show on the Workstation in the required OU ?
Nicolas


More information about the samba mailing list