[Samba] classicupgrade

[Rowland Penny]

On Tue, 6 Nov 2018 12:13:31 +0100
Corrado Ravinetto via samba <samba at lists.samba.org> wrote:

> 
> 
> Il 06/11/2018 11:48, Rowland Penny via samba ha scritto:
> > No, your GPO's will still work.
> 
> ok
> but when i created my gpo in sysvol i cannot access to this share
> because:
> 
> drwxrwx---+ 4 3000002 3000002 48  6 nov 12.03 
> {CE2EBBA2-28FE-45D7-94EC-CD7357F38D73}
> 
> Must i, for each new policy, adjiust right e owner  ???
> 
> mmmmmmmh

'3000002' is coming from idmap.ldb and because '3000002' isn't a Unix
user, it isn't mapped to a Unix name, it could in fact be a group, yes,
groups on Windows can own folders & files.

There is a wiki page that might help:

https://wiki.samba.org/index.php/Managing_local_groups_on_domain_members_via_GPO_restricted_groups

Further than that, I cannot help, I do not use GPO's, I don't have any
Windows clients ;-)

Perhaps Louis might care to chime in here.

Rowland