[Samba] Permission Issues with GPO

[Andrey Repin]

Greetings, Viktor Trojanovic!

> The problem is not the GPO itself. The GPO containers are stored, as
> they should be, in the file system under sysvol/AD-DOMAIN/Policies, and 
> they are being accessed correctly by the respective users and computers.

> Maybe my question isn't phrased perfectly but my problem is that any 
> *computer GPO* that is accessing my file server (Samba Member), fails 
> with an access denied error.

If GPO object accessing a network share is created in the "System" context,
the group "Domain Computers" must have access to the relevant network path.
(That means both the share itself and the path below.)

> To give you an example. I might have a
> startup script that is supposed to copy a file from the file server, 
> let's say an MS Word template, to the AD computer.

Best to create shortcuts instead of copying templates.
Then you don't need to chase each system and it is not even a single
difference for the MS Office.

> The GPO itself is
> saved on the DC and it is called correctly but the access to my file 
> server is being denied, the copy transaction is not happening.

> There is a permission problem and I'm trying to figure out what it is. 
> The reason I'm posting this here is because I assume there is a link 
> between my Samba settings on the file server, and their connection to 
> the Samba DC that are responsible for this problem as this is not 
> standard behavior.


-- 
With best regards,
Andrey Repin
Monday, November 23, 2015 10:22:44

Sorry for my terrible english...