[Samba] Windows 8 polices are not applied

[Jeroen Hermans]

Hello Daniel,

I am not sure if this is also true for Windows 8.0 (the clients), but i
will definitely look into this. I see a number of things i should check:

- Group Policy caching explicitly disabled
- “Always wait for the network at computer startup and user logon”
should be on
- check the "slow link value" as the article states: "Other policies,
such as Folder Redirection, are then not downloaded."

Am i understanding the issue correctly?
The line between the clients btw is a cat6 cable running at 1Gbps.
Kind regards,

Jeroen Hermans


On 10/20/2014 12:21 PM, Daniel Müller wrote:
> I think this could be about "group-plicy-caching" under win 8.1
> Have a look:
>
> https://4sysops.com/archives/group-policy-caching-in-windows-8-1/
>
>
> Good Luck
> Daniel
>
>
> -----Ursprüngliche Nachricht-----
> Gesendet: Montag, 20. Oktober 2014 10:58
> Betreff: Re: [Samba] Windows 8 polices are not applied
>
> Hello Daniel,
>
> Thank you again for the fast reply. I checked the XML file and the mappings
> are done to the new NAS and not to the old one. This confirms that the
> policies are updated on the DC, but not on the clients.
> I also did a grep -R "10.20.0.34" * because that is the ip of the old NAS.
> That string is nowhere in the directory structure. "10.20.0.38"
> (the new NAS) is though.
> Kind regards,
>
>         Jeroen Hermans
>
> On 10/20/2014 10:44 AM, Daniel Müller wrote:
>> To proof:
>> Look at your
>> \\dc\sysvol\your.domain\Policies\{.....}\User\Prefernces\Drives, and 
>> there to a xml file.
>> In side this xml file there should be the changes.
>>
>> Ex:
>> \\s4master\sysvol\tplk.loc\Policies\{31B2F340-016D-11D2-945F-00C04FB98
>> 4F9}\U
>> SER\Preferences\Drives
>>
>> Drives.xml
>>
>>
>> EDV Daniel Müller
>>
>> -----Ursprüngliche Nachricht-----
>> Gesendet: Montag, 20. Oktober 2014 10:20
>> Betreff: Re: [Samba] Windows 8 polices are not applied
>>
>> Hello Daniel,
>>
>> Thank you for your reply. The NAS is not related to the AD and it is 
>> not storing policies, but we have redirected folders to the NAS. 
>> Because the DC is not pushing the new policies to the clients, the 
>> clients have old mappings.
>> The policies are indeed done with the Windows 8 Group Policy Editor.
>> Kind regards,
>>
>>         Jeroen Hermans
>>
>>
>> On 10/20/2014 08:00 AM, Daniel Müller wrote:
>>> I do not understand, how can your NAS store AD policies? Is it a 
>>> samba
>>> 4 AD host/server?
>>> Win 8 group policies must be done with the group police tool of MS
>>> Windows8 or less Win7 if it should work.
>>>
>>> Greetings
>>> Daniel
>>>
>>>
>>> -----Ursprüngliche Nachricht-----
>>> Gesendet: Freitag, 17. Oktober 2014 17:19
>>>
>>> Hello all,
>>>
>>> I am having some problems with the group policies in a small (~10 pc's)
>> AD.
>>> I have set up Samba and i used a NAS for saving home folders and 
>>> policies. I then had to replace the NAS and i used a new ip for the 
>>> new NAS. For the last step i changed the ip of the redirected folders 
>>> in the policy in order to point all pc's to the new NAS. It seems the 
>>> policies are not applied as i still see the computers try to use the old
>> NAS.
>>> [jhermans at lanserver1 ~]$ samba --version Version 4.0.1-4.centos6.1
>>> [jhermans at lanserver1 ~]$ uname -a
>>> Linux lanserver1.smarthomes.lan 2.6.32-431.3.1.el6.x86_64 #1 SMP Fri 
>>> Jan
>>> 3 21:39:27 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
>>> [jhermans at lanserver1 ~]$ host -t SRV _kerberos._udp.smarthomes.lan 
>>> _kerberos._udp.smarthomes.lan has SRV record 0 100 88 
>>> lanserver1.smarthomes.lan.
>>> [jhermans at lanserver1 ~]$ host -t SRV _ldap._tcp.smarthomes.lan 
>>> _ldap._tcp.smarthomes.lan has SRV record 0 100 389 
>>> lanserver1.smarthomes.lan.
>>> [jhermans at lanserver1 ~]$ host -t A lanserver1.smarthomes.lan 
>>> lanserver1.smarthomes.lan has address 10.20.0.33
>>>
>>> I checked that the Windows clients have 10.20.0.33 as the DNS server.
>>> I also tried runnning: gpupdate /force on the clients. The clients 
>>> donnot update the policies and now i am stuck with half-functioning
>> clients.
>>> I hope you can give me some help with this problem.
>>> Thank you very much. If you need any more information i am happy to 
>>> provide you with that.
>>> Kind regards,
>>>
>>> Jeroen Hermans
>>> --
>>>