[Samba] GPO fail to apply for Computers

Rowland Penny rpenny at samba.org
Sat Jul 28 15:05:35 UTC 2018

On Sat, 28 Jul 2018 16:32:30 +0200
Johannes Engel via samba <samba at lists.samba.org> wrote:

> Dear all,
> after migrating from Samba 4.6.15 to 4.8.3 (two fresh DCs) I see that
> computers are no longer applying GPOs while it still works for Users.
> GPResult states that GPOs are not applied due to missing access
> rights. My smb.conf:
> # Global parameters
> [global]

>         host msdfs = yes
>         vfs object = dfs_samba4, acl_xattr
>         winbind use default domain = yes

You should remove the above lines from your smb.conf, the first is a
default setting, you do not need to set the second and the third does

What distro is this, or to be more precise, are you using MIT ?
If so, there is a bug for this:


The present cure seems to be, don't use MIT ;-)


More information about the samba mailing list