[Samba] Problems with GPO

[Rowland Penny]

On Tue, 18 Jul 2017 19:58:41 +0200
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

> Am 2017-07-18 um 19:26 schrieb Stefan G. Weichinger via samba:
> 
> > On the DC in the filesystem it looks pretty much the same (owner,
> > group, rights, ACLs).
> > 
> > Can't open the policy dir via explorer from the RSAT-machine,
> > logged in as a domain admin.
> 
> I rm-ed that one and recreated it. period.
> 
> But I still have issues with "Group Policy Drive Maps" and "access
> denied".
> 
> Found that I have to always add read rights for "authenticated users"
> ... but still fiddling, googling and trying.
> 
> Can someone point out which ACLs or permissions \\dc\sysvol etc has to
> be given?
> 
> On the DC itself I see mixed owners:
> 
> drwxrwxr-x 5 BUERO\sgw BUILTIN\administrators  4096 Jul  8 13:59
> {09341EB1-C981-4C9C-86E5-7924C903752F}
> drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
> {0CFA4103-3062-4315-954E-0851998BCB01}
> drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 16:54
> {1C3C3E27-11EA-40FA-B646-EB8FECCD451B}
> drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
> {31B2F340-016D-11D2-945F-00C04FB984F9}
> drwxrwxrwx 4 BUERO\sgw root                    4096 Jul 10 11:01
> {3A5D2F3D-654C-46B2-94A5-B604F9D471EC}
> drwxrwxr-x 4 root      BUILTIN\administrators  4096 Jul  8 13:59
> {479204EF-EF2E-4C1B-9E3E-1B50149D578B}
> drwxrwxr-x 5 root      root                    4096 Jul 10 10:45
> {5050C433-8820-44B5-B2A7-3BA72A20594B}
> drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 16:38
> {5CD2BE32-5B4F-4CAC-A0BF-C21E9E2DD70E}
> drwxrwxrwx 4 BUERO\sgw root                    4096 Jul 10 09:57
> {608D040B-73CC-47AB-AC74-76852F958FBE}
> drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 19:34
> {65BE084E-9BE5-47D9-8248-6FF971F468AB}
> drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
> {6AC1786C-016F-11D2-945F-00C04FB984F9}
> drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 10 09:41
> {80F4F075-13DF-44F0-95AC-D5794C13924B}
> drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
> {876D1D2A-56BC-477D-9052-33C6A37FF58A}
> drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
> {9674E441-D771-4F02-B701-9E4A73076218}
> drwxrwxr-x 4 root      BUILTIN\administrators  4096 Jul  8 13:59
> {B21C7A4C-E611-460F-BC81-1BBDEC8C9053}
> drwxrwxr-x 5 root      root                    4096 Jul  8 13:59
> {B606E319-D362-4866-88A3-8C7137352290}
> drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
> {BEECD570-701D-4DA3-B085-67E604D4769D}
> drwxrwxr-x 4 root      root                    4096 Jul  8 13:59
> {CCA76DEA-F8FD-4EBD-AA1D-AF82B114ACE9}
> drwxrwxrwx 4 BUERO\sgw root                    4096 Jul 11 19:54
> {D5B25CF0-D9B4-47ED-9237-EEF77D429C7D}
> drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 17:04
> {ED75AB0E-10AE-44FA-9A5F-398861ECF28C}
> drwxrwxrwx 5 BUERO\sgw root                    4096 Jul 18 16:48
> {EDE5DC38-46E0-4ED6-9986-0461B94B0B15}
> drwxrwxr-x 4 root      BUILTIN\administrators 12288 Jul  8 13:59
> PolicyDefinitions
> 
> 

Lets take this one step at a time, what command did you use to get the
above results ?

Rowland