[Samba] GPUpdate

Rowland Penny rpenny at samba.org
Sat Nov 10 07:53:19 UTC 2018

On Sat, 10 Nov 2018 04:07:43 +0300
Andrey Repin <anrdaemon at yandex.ru> wrote:

> Greetings, Rowland Penny!
> > Yes, but do you delete the default Policies that are hardcoded into
> > AD ?
> There's no "policies", there's one policy that is completely empty.
> Which you can safely unlink or delete.

No, there are two default policies, the default domain policy and the
default DC policy and yes, whilst they are both empty, the GUID's are
hardcoded into AD. They are expected to be there and will cause errors
if not found. You should not modify these policies, you should create
new ones, this isn't a Samba thing, it is a Microsoft best practice.


More information about the samba mailing list