[Samba] Permission Issues with GPO
anrdaemon at yandex.ru
Mon Nov 23 07:32:35 UTC 2015
Greetings, Viktor Trojanovic!
> The problem is not the GPO itself. The GPO containers are stored, as
> they should be, in the file system under sysvol/AD-DOMAIN/Policies, and
> they are being accessed correctly by the respective users and computers.
> Maybe my question isn't phrased perfectly but my problem is that any
> *computer GPO* that is accessing my file server (Samba Member), fails
> with an access denied error.
If GPO object accessing a network share is created in the "System" context,
the group "Domain Computers" must have access to the relevant network path.
(That means both the share itself and the path below.)
> To give you an example. I might have a
> startup script that is supposed to copy a file from the file server,
> let's say an MS Word template, to the AD computer.
Best to create shortcuts instead of copying templates.
Then you don't need to chase each system and it is not even a single
difference for the MS Office.
> The GPO itself is
> saved on the DC and it is called correctly but the access to my file
> server is being denied, the copy transaction is not happening.
> There is a permission problem and I'm trying to figure out what it is.
> The reason I'm posting this here is because I assume there is a link
> between my Samba settings on the file server, and their connection to
> the Samba DC that are responsible for this problem as this is not
> standard behavior.
With best regards,
Monday, November 23, 2015 10:22:44
Sorry for my terrible english...
More information about the samba