[Samba] Proper sysvol permissions

[Michal67M at seznam.cz]

(sorry for not threading, still getting no mails from  samba list)

Ad rights on samba directories:

# rm -rf /usr/local/samba.ad
# cd /usr/src/samba-4.8.2
# make install

(no dirs in /usr/local/samba.ad/var/locks/ at this point)

# /usr/local/samba.ad/sbin/samba-tool domain provision --use-rfc2307 --
interactive
      realm: NEMUH.CZ
      netbios: UHN
   ...

# ll /usr/local/samba.ad/var/locks/sysvol/nemuh.cz/
total 16
drwxrwx---+ 4 root 3000000 4096 Jun 25 12:01 Policies
drwxrwx---+ 2 root 3000000 4096 Jun 25 12:01 scripts

Is this normal behaviour?

Thanks, Michal

PS: installing into samba.ad directory for being sure it is my own samba 
installation