[Samba] Busted ACLs

[jimc]

It has been a while since I have had to annoy you. You may be pleased to 
know that my server has been working quite well...until recently. I 
think it is because of a power hit we took recently.

I don't know which came first, but I have four symptoms:

1) When I log in on a Windows machine, with an account that should have 
administrator permissions, I don't have said admin rights.

2) When I attempt to launch the Windows remote server tools, I can 
select the server, but when I attempt to connect I get the ever popular 
'rpc server unavailable'.

3) When I run 'samba-tool gpo aclcheck', I get an uncaught exception 
error (-1073741705) 'Indicates the ACL structure is is not valid'. 
Followed, of course, by the unwinding call stack.

4) smbclient //localhost/netlogon -UAdministrator -c 'ls' nets me the 
message:
'Domain=[ozco] os=[unix] Server=[Samba 4.3.1]
NT_STATUS_INVALID_ACL listing \*'

How do I fix this?

I have spent days searching for an answer. I have learned lots and lots 
about Anterior Cruciate Ligament. Not as helpful as I hoped. It reminded 
me of when I had to get mine rebuilt.

I can send log files if you need them. I hope that you know what is 
going on, you tell me that it happens all the time, and I don't have to 
resort to a backup.

Thanks!!!

-jimc