[Samba] How to copy roaming profiles to new server ? ("Group policy client service failed. The logon access is denied")

Rowland Penny rowlandpenny at googlemail.com
Mon Dec 8 15:06:52 MST 2014

On 08/12/14 22:01, Marc Muehlfeld wrote:
> Am 08.12.2014 um 22:55 schrieb Rowland Penny:
>> Hi, It sounds very much like a SID problem to me.
>> the user 'Fred' with the SID-RID
>> 'S-1-5-21-4036476082-4153129556-3089177936-1005' is **NOT** the same
>> user as 'Fred' with the SID-RID
>> 'S-1-5-21-2025076216-3455336656-3842161122-1005'
>> You need to change the domain SID on the new PDC to match the SID on the
>> windows machines.
> Denis, is this a _new domain_ (with the same name)? Or just a _new
> server_ where you placed the profiles. If it's a _new domain_, then
> Rowland is surely right and it is an SID problem. But you talked about a
> _new server_. Please be more clear about your environment.
> Regards,
> Marc
Hi Marc, I read it that he has just set Samba4 up as a replacement for 
an S3 'classic' NT4 PDC, if he has upgraded to AD without using 
samba-tool, then I think he has a big problem, but as you said, more 
info required.


More information about the samba mailing list