[Samba] problems gpupdate and domain-trust

Heinz Hölzl heinz.hoelzl at gvcc.net
Wed Feb 17 14:17:55 UTC 2016


I have a problem with gpupdate having a trust with a M$ -ADS domain.

Before creating the trust gpupdate worked fine. Then i added the trust and then gpupdate gives the following error:

Updating policy...

Computer Policy update has completed successfully.
User Policy could not be updated successfully. The following errors were encount

The processing of Group Policy failed. Windows could not determine if the user a
nd computer accounts are in the same forest. Ensure the user domain name matches
 the name of a trusted domain that resides in the same forest as the computer ac


The trust works fine (i can authenticate trusted users on a PC in my samba domain and viceverse)

Details of the Trust:
samba-tool domain trust show klingons
LocalDomain Netbios[GVCC] DNS[gvcc.net] SID[S-1-5-21-1608159440-4144762864-1017073214]

NetbiosName:    KLINGONS
DnsName:        klingons.imp
SID:            S-1-5-21-3288560663-12659786-2782445548
Type:           0x2 (UPLEVEL)
Direction:      0x3 (BOTH)
Attributes:     0x8 (FOREST_TRANSITIVE)
PosixOffset:    0x00000000 (0)
kerb_EncTypes:  0x4 (RC4_HMAC_MD5)
Namespaces[2] TDO[klingons.imp]:
TLN: Status[Enabled]                  DNS[*.klingons.imp]
DOM: Status[Enabled]                  DNS[klingons.imp] Netbios[KLINGONS] SID[S-1-5-21-3288560663-12659786-2782445548]



More information about the samba mailing list