[Samba] Continued Group Policy issues

[Anantha Raghava]

Hi,

We have 4 Domain Controllers all on CentOS 7.5 and Samba Version 4.7.5.

We are using iNotify to watch the folder and pushing any changes made to 
GPO from our first Domain Controller.

Off late, we started observing that, unless the client is reading the 
Group Policies from the first Domain Controller, none of the Group 
Policies gets applied. On the Windows Clients, we have observed that 
clients are reporting "Access Denied" error to Group Policy Objects on 
other Domain Controllers.

"samba-tool ntacl sysvolcheck" reports no errors on the GPO on any 
Domain Controllers. Yet, the clients report "Access Denied" on all other 
DCs except first one.

What could have gone wrong? Any clues?

-- 

Thanks & Regards,


Anantha Raghava

Do not print this e-mail unless required. Save Paper & trees.