[Samba] Permission denied on GPT.ini (Event ID 1058)

[Sébastien Le Ray]

Hi,

Thank you for your report. I can confirm that the issue kind of 
"resolves" itself after a while (the while can be as long as several 
weeks which is annoying when you install a common base of software 
through GPO).

It seems like one (or several) of the DCs are misconfigured but checking 
throught ldapcmp returns no difference, and ntacl sysvolreset on all DC 
doesn't solve it (by the way it does not seem to adjust unix ACLs, if I 
setfacl -bR on Policies I never get ACLs back)

Clicking on the link in the events viewer (which *never* fails) opens it 
as the logged in user, that's why I'm convinced the issue is tied to 
machine accounts handling

Regards

Le 22/03/2016 15:11, Ryan Ashley a écrit :
> I just saw this thread while browsing my emails and I want to report
> that I get this frequently but randomly on every Samba4 domain I run. It
> is completely random in that it affects a PC today, but a week from now
> that same PC may work just fine. It may then affect a different PC which
> had no issues prior.
>
> Also, if I click the link to "gpt.ini" in the event log the file DOES
> open and I can view it all day long. It is almost as though the system
> lies to me in saying it cannot access the file, but it can. I have been
> dealing with this for two years now.
>
> Finally, this seems to occur MUCH more frequently on domains which have
> multiple DCs. A single DC domain may have this happen once in a year,
> and only for a moment, whereas a multiple DC domain may have this happen
> regularly.
>
> Lead IT/IS Specialist
> Reach Technology FP, Inc
>