[Samba] Windows ACLs on share

[Rowland Penny]

On Thu, 3 Jan 2019 15:08:46 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

> 
> We are in the process of switching over shares from the old way of
> doing this to Windows ACLs:
> 
> disable "valid users" "write list" etc
> 
> and set ACLs via Windows Explorer ...
> 
> And I struggle.

Are you following this:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

> 
> 
> I am asking for a way to "start ACLs from scratch".
> 
> I ran "setfacl -b -R" on the dir on the samba server and did a "chown
> -R root:10513" to hand it to "domain users"

That isn't using Windows ACLs

> 
> in Windows Explorer we try to edit the Permissions in "Computer
> Management" and get errors around writing to some "container" (I get
> the msg in german, would have to google for english error msg)

Please either post the message as is, or the google translation.

> 
> -
> 
> Could someone pls advise?
> 
> Addon: a second share works fine with ACLs already, so samba itself
> should be OK.
> 

If it works on one share, it should work on all, perhaps posting
smb.conf may help.

Rowland