[Samba] samba 4.8.3 "apply group policy = yes" error

[Rowland Penny]

On Tue, 3 Jul 2018 08:06:44 +0200
Kacper Wirski via samba <samba at lists.samba.org> wrote:

> Hello,
> 
> I've realised that there was an error on this server, wrong
> idmap.ldb, 3000002 should be one of the built-in users or groups
> instead of machine own account. Unfortunately fixing idmap (I
> imported idmap.ldb from DC with correct mapping) didn't fix my
> original error, as it still appears each time samba is restarted.
> 

It isn't actually an error, idmap.ldb allocates ID's on a first come
basis and you will get different ID's on different Samba DC's.

When you sync sysvol between DC's, you also need to sync idmap.ldb.

Rowland