[Samba] Rights issue on GPO

[Rowland penny]

On 22/06/16 12:59, mj wrote:
>
>
> On 06/22/2016 01:44 PM, mj wrote:
>>
>> And then perhaps we also need to set the idmap ranges on the DCs? I
>> thought they were only for the domain member servers...
> https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD
>
> :-)
>

Or, you could just provision with '--use-rfc2307=yes' :-)

 From my testing on a DC,setting the idmap ranges as you would on a 
domain member, does nothing.

Rowland