[Samba] Permission denied on GPT.ini (Event ID 1058)

[L.P.H. van Belle]

Ok, 

 

> I don't think so, I launch gpupdate using local admin account, so as I

> understand it, only computer account is used (since local admin as no

> existence on the domain)

Why a local admin, please use a ?domain admin? .. 

 

Test as follow. 

Open de security tab of the GPT.INI. 

Advanced settings, last tab, effective settings, 

At objecttype, deselect all, select computer. 

Search for : COMPUTERNAME$ 

It should resolve to your computer. 

Klik ok, now check the security settings again here. 

Must have at least :

Traverse Folder / Execute file. 

List folder/ Read Data

Read Attributes. 

Read Exended Attributes. 

Read permissions. 

 

 

> wbinfo -i COMPUTERNAME$ & wbinfo -r COMPUTERNAME$ correctly returns him

> as member of domain computers (with proper gid) and a custom group to

> which it was added

When thats ok, keep it as is now, looks good. 

 

After checking you rights, 

You can try this also if we speak of windows 7, try this. 

( just found this ) 

 

Open CMD Box as Administrator. 

 

Run : 

DEL /S /F /Q "%ALLUSERSPROFILE%\Application Data\Microsoft\Group Policy\History\*.*"

gpupdate /force ( or reboot ) 

 

Greetz, 

 

Louis

 

> -----Oorspronkelijk bericht-----

> Van: Sébastien Le Ray [mailto:sebastien-samba at orniz.org]

> Verzonden: maandag 18 april 2016 15:03

> Aan: L.P.H. van Belle; samba at lists.samba.org

> Onderwerp: Re: [Samba] Permission denied on GPT.ini (Event ID 1058)

> 

> 

> 

> Le 18/04/2016 12:58, L.P.H. van Belle a écrit :

> > Ok, try this.

> >

> > Gif the pc a uid and check again.

> > If it works then, its a share or security right.

> >

> > Gpupdate /force works because at that point you "user"/user has a uid

> and gid.

> 

> I don't think so, I launch gpupdate using local admin account, so as I

> understand it, only computer account is used (since local admin as no

> existence on the domain)

> 

> >

> > The error occurs at start up because the COMPUTERNAME$ doent have access

> to that gpt.ini.

> 

> wbinfo -i COMPUTERNAME$ & wbinfo -r COMPUTERNAME$ correctly returns him

> as member of domain computers (with proper gid) and a custom group to

> which it was added

> 

> I added an uidNumber to the machine, should I explicitely add it to the

> GPO access rights?

> 

> Regards