[Samba] Cannot edit GPO's anymore via RSAT

Marc Muehlfeld mmuehlfeld at samba.org
Fri May 23 15:01:21 MDT 2014

Hello George,

Am 23.05.2014 22:44, schrieb George Itee:
> Trying to add/remove a user in the Security Filtering results in Access is
> Denied again. My user is a member of Domain Admins, Group Policy Creator
> Owners and Schema Admins groups.

Can you do:
# samba-tool dbcheck --cross-ncs (--fix)

And if your domain was provisioned with an early 4.0 or pre 4.0, also run
# samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix

> samba-tool ntacl sysvolcheck says:


But even if sysvolcheck has several uncaught exceptions, the sysvolreset


More information about the samba mailing list