[Samba] Fwd: GPO's in OU's not working

[Joe Maloney]

---------- Forwarded message ----------
From: Joe Maloney <jmaloney at pcbsd.org>
Date: Thu, Feb 27, 2014 at 10:21 AM
Subject: Re: [Samba] GPO's in OU's not working
To: Ricky Nance <ricky.nance at gmail.com>


Thanks for the gpresult tip to output the info.  I was aware of gpresult
but not how to dump the info.  I did try samba-tool ntacl sysvolcheck after
creating my first OU and linked GPO.  In fact sysvolcheck showed an error
so I ran sysvolreset, sysvol check again.  After that the error was gone
but still GPO's are not yet working in OU.

Joe Maloney


On Thu, Feb 27, 2014 at 9:04 AM, Ricky Nance <ricky.nance at gmail.com> wrote:

> There are a couple of things to check. First I'd do (from a windows command
> prompt) "gpresult /h out.html && start out.html" (without the " marks), to
> see if the computer is seeing that is should be in a certain OU. Next on
> the samba box do a samba-tool ntacl sysvolreset (I think that is the right
> command I don't have a samba box here at work to check on, someone correct
> me if its not), this will reset all the ACL's on sysvol to default, which
> should in turn let your clients work as expected. Also it wouldn't hurt to
> check on the windows box and make sure you have the correct DNS servers set
> (they need to be set to your AD DC ip).
>
>
> On Thu, Feb 27, 2014 at 2:48 AM, Michał Półrolniczak <
> michal.polrolniczak at warp.org.pl> wrote:
>
> > we are running 4.1.4
> > and there is no problem with GPO for users/computer in OU.
> > are your gpo are configured for Authenticated Users?
> >
> > PS. we having problems with dns, but not with GPO - sometimes GPO ain't
> > refresh on clients because dns dont resolve domain name allways. But
> > still when it dose resolve name gpo work lika a charm
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>