[Samba] gpo not working

jorgee at vcl.cu jorgee at vcl.cu
Fri Nov 15 09:55:24 MST 2013


Hello people:

First, excuse any misspelling, english is not my mother tongue

I'm  triying a simple gpo, put a fixed image as wallpaper on all the pc
connected to the dc but is not working.

Using the remote administration tool had has defined an Organizational
Unit with one user and defined a policy with two restrictions
1) use a shared image  [ \\dc\common\backgroud.jpg ]  as wallpaper
2) disable change of wallpaper by the user

the same restrictions are applied in the default domain policy


BUT IS NOT WORKING
Login with a user inside the default Users group or a user from the OU
created is the same, wallpaper goes with the XP default and not the image
i put on \\dc\common\backgroud.jpg

the test is done with a phisical pc as domain member and a server over a
virtual machine  with debian wheezy (proxmox container)

some data for have an idea on scene

#samba -V
Version 4.2.0pre1-GIT-UNKNOWN

#uname -a
Linux dc 2.6.32-20-pve #1 SMP Wed May 15 08:23:27 CEST 2013 i686 GNU/Linux


#samba-tool gpo listall
GPO          : {31B2F340-016D-11D2-945F-00C04FB984F9}
display name : Default Domain Policy
path         :
\\shop.zone.example.com\sysvol\shop.zone.example.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}
dn           :
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com
version      : 0
flags        : NONE

GPO          : {6AC1786C-016F-11D2-945F-00C04FB984F9}
display name : Default Domain Controllers Policy
path         :
\\shop.zone.example.com\sysvol\shop.zone.example.com\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}
dn           :
CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com
version      : 0
flags        : NONE

GPO          : {000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60}
display name : shop01
path         :
\\shop.zone.example.com\SysVol\shop.zone.example.com\Policies\{000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60}
dn           :
CN={000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com
version      : 131072
flags        : NONE

GPO          : {6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC}
display name : infor1
path         :
\\shop.zone.example.com\SysVol\shop.zone.example.com\Policies\{6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC}
dn           :
CN={6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com
version      : 65536
flags        : NONE


besides there is a strange error with aclcheck

# samba-tool gpo aclcheck
ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element'
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 175, in _run
    return self.run(*args, **kwargs)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/gpo.py",
line 1150, in run
    ds_sd_ndr = m['nTSecurityDescriptor'][0]





More information about the samba mailing list