[Samba] samba 4.8.3 "apply group policy = yes" error

Rowland Penny rpenny at samba.org
Tue Jul 3 08:17:41 UTC 2018

On Tue, 3 Jul 2018 08:06:44 +0200
Kacper Wirski via samba <samba at lists.samba.org> wrote:

> Hello,
> I've realised that there was an error on this server, wrong
> idmap.ldb, 3000002 should be one of the built-in users or groups
> instead of machine own account. Unfortunately fixing idmap (I
> imported idmap.ldb from DC with correct mapping) didn't fix my
> original error, as it still appears each time samba is restarted.

It isn't actually an error, idmap.ldb allocates ID's on a first come
basis and you will get different ID's on different Samba DC's.

When you sync sysvol between DC's, you also need to sync idmap.ldb.


More information about the samba mailing list