[Samba] GPUpdate

[Rowland Penny]

On Sat, 10 Nov 2018 04:07:43 +0300
Andrey Repin <anrdaemon at yandex.ru> wrote:

> Greetings, Rowland Penny!
> 
> > Yes, but do you delete the default Policies that are hardcoded into
> > AD ?
> 
> There's no "policies", there's one policy that is completely empty.
> Which you can safely unlink or delete.

No, there are two default policies, the default domain policy and the
default DC policy and yes, whilst they are both empty, the GUID's are
hardcoded into AD. They are expected to be there and will cause errors
if not found. You should not modify these policies, you should create
new ones, this isn't a Samba thing, it is a Microsoft best practice.

Rowland