[Samba] Problems with GPO

[Stefan G. Weichinger]

Am 2017-07-18 um 19:26 schrieb Stefan G. Weichinger via samba:

> On the DC in the filesystem it looks pretty much the same (owner, group,
> rights, ACLs).
> 
> Can't open the policy dir via explorer from the RSAT-machine, logged in
> as a domain admin.

I rm-ed that one and recreated it. period.

But I still have issues with "Group Policy Drive Maps" and "access denied".

Found that I have to always add read rights for "authenticated users"
... but still fiddling, googling and trying.

Can someone point out which ACLs or permissions \\dc\sysvol etc has to
be given?

On the DC itself I see mixed owners:

drwxrwxr-x 5 BUERO\sgw BUILTIN\administrators  4096 Jul  8 13:59
{09341EB1-C981-4C9C-86E5-7924C903752F}
drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
{0CFA4103-3062-4315-954E-0851998BCB01}
drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 16:54
{1C3C3E27-11EA-40FA-B646-EB8FECCD451B}
drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
{31B2F340-016D-11D2-945F-00C04FB984F9}
drwxrwxrwx 4 BUERO\sgw root                    4096 Jul 10 11:01
{3A5D2F3D-654C-46B2-94A5-B604F9D471EC}
drwxrwxr-x 4 root      BUILTIN\administrators  4096 Jul  8 13:59
{479204EF-EF2E-4C1B-9E3E-1B50149D578B}
drwxrwxr-x 5 root      root                    4096 Jul 10 10:45
{5050C433-8820-44B5-B2A7-3BA72A20594B}
drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 16:38
{5CD2BE32-5B4F-4CAC-A0BF-C21E9E2DD70E}
drwxrwxrwx 4 BUERO\sgw root                    4096 Jul 10 09:57
{608D040B-73CC-47AB-AC74-76852F958FBE}
drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 19:34
{65BE084E-9BE5-47D9-8248-6FF971F468AB}
drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
{6AC1786C-016F-11D2-945F-00C04FB984F9}
drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 10 09:41
{80F4F075-13DF-44F0-95AC-D5794C13924B}
drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
{876D1D2A-56BC-477D-9052-33C6A37FF58A}
drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
{9674E441-D771-4F02-B701-9E4A73076218}
drwxrwxr-x 4 root      BUILTIN\administrators  4096 Jul  8 13:59
{B21C7A4C-E611-460F-BC81-1BBDEC8C9053}
drwxrwxr-x 5 root      root                    4096 Jul  8 13:59
{B606E319-D362-4866-88A3-8C7137352290}
drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
{BEECD570-701D-4DA3-B085-67E604D4769D}
drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
{CCA76DEA-F8FD-4EBD-AA1D-AF82B114ACE9}
drwxrwxrwx 4 BUERO\sgw root                    4096 Jul 11 19:54
{D5B25CF0-D9B4-47ED-9237-EEF77D429C7D}
drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 17:04
{ED75AB0E-10AE-44FA-9A5F-398861ECF28C}
drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 16:48
{EDE5DC38-46E0-4ED6-9986-0461B94B0B15}
drwxrwxr-x 4 root      BUILTIN\administrators 12288 Jul  8 13:59
PolicyDefinitions