[Samba] Samba 4 -> Group Policy Drive Map -> Access Denied

[Luke Barone]

OK, the preference is set correctly. Have you run a "samba-tool ntacl
sysvolcheck" on your first domain controller? That will check the
permissions. If you have additional domain controllers, ensure you're
connecting to the one holding the PDC Emulator role (typically your first
DC) in your GPMC.

If the sysvolcheck says everything is fine, and you only have one domain
controller, then we'll have more troubleshooting to do.

On Mon, Jan 21, 2019 at 10:37 AM Marco Shmerykowsky via samba <
samba at lists.samba.org> wrote:

> <?xml version="1.0" encoding="utf-8"?>
> <Drives clsid="{8FDDCC1A-0C3C-43cd-A6B4-71A6DF20DA8C}"><Drive
> clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="W:" status="W:"
> image="2" changed="2019-01-21 18:36:07"
> uid="{6524E6E3-E107-48CC-9973-406E16B5F34D}" userContext="1"
> bypassErrors="1"><Properties action="U" thisDrive="SHOW" allDrives="SHOW"
> userName="" path="\\sce251\test-share" label="SHARE" persistent="1"
> useLetter="1" letter="W"/><Filters/></Drive>
> </Drives>
>
> On Mon, January 21, 2019 1:27 pm, Luke Barone via samba wrote:
> > OK, remove the Item Level Targeting - that should hit all Domain Users
> > anyways.
> >
> > Can you extract the .XML file that is made from that policy? Go to your
> > SYSVOL\<domain>\Policies\<GUID for Policy>\User\Preferences\Drives, and
> > open up "Drives.xml". Copy and paste the contents of that file into the
> > mailing list.
> >
> > On Mon, Jan 21, 2019 at 10:23 AM Marco Shmerykowsky PE via samba <
> > samba at lists.samba.org> wrote:
> >
> >> user configuration -> Preferences -> Windows Settings -> Drive Maps
> >>
> >> Item Level Targeting -> Security Group, Domain Users
> >>
> >> On 1/21/2019 11:09 AM, Luke Barone via samba wrote:
> >> > Where is the policy targeting - the user or the computer?
> >> >
> >> >
> >> > On Mon, Jan 21, 2019 at 7:51 AM Marco Shmerykowsky PE via samba <
> >> > samba at lists.samba.org> wrote:
> >> >
> >> >> I seem to be having trouble getting group policies
> >> >> to map a drive.  When I drilled down thru the logs
> >> >> I get an "Access Denied" message.
> >> >>
> >> >> I can navigate to the share via the computer browser
> >> >> and map a drive the "old fashion way" with any issues.
> >> >> Files can be read and written.
> >> >>
> >> >> The group policy doesn't seem to take.  Suggestions?
> >> >>
> >> >> Thank you.
> >> >>
> >> >> --
> >> >> To unsubscribe from this list go to the following URL and read the
> >> >> instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba