[Samba] Samba 4 -> Group Policy Drive Map -> Access Denied

[Marco Shmerykowsky PE]

Thanks.  Just ran "samba-tool ntacl sysvolrest" and that seems
to have fixed the issue.

On 1/21/2019 2:11 PM, Luke Barone via samba wrote:
> OK, the preference is set correctly. Have you run a "samba-tool ntacl
> sysvolcheck" on your first domain controller? That will check the
> permissions. If you have additional domain controllers, ensure you're
> connecting to the one holding the PDC Emulator role (typically your first
> DC) in your GPMC.
> 
> If the sysvolcheck says everything is fine, and you only have one domain
> controller, then we'll have more troubleshooting to do.
> 
> On Mon, Jan 21, 2019 at 10:37 AM Marco Shmerykowsky via samba <
> samba at lists.samba.org> wrote:
> 
>> <?xml version="1.0" encoding="utf-8"?>
>> <Drives clsid="{8FDDCC1A-0C3C-43cd-A6B4-71A6DF20DA8C}"><Drive
>> clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="W:" status="W:"
>> image="2" changed="2019-01-21 18:36:07"
>> uid="{6524E6E3-E107-48CC-9973-406E16B5F34D}" userContext="1"
>> bypassErrors="1"><Properties action="U" thisDrive="SHOW" allDrives="SHOW"
>> userName="" path="\\sce251\test-share" label="SHARE" persistent="1"
>> useLetter="1" letter="W"/><Filters/></Drive>
>> </Drives>
>>
>> On Mon, January 21, 2019 1:27 pm, Luke Barone via samba wrote:
>>> OK, remove the Item Level Targeting - that should hit all Domain Users
>>> anyways.
>>>
>>> Can you extract the .XML file that is made from that policy? Go to your
>>> SYSVOL\<domain>\Policies\<GUID for Policy>\User\Preferences\Drives, and
>>> open up "Drives.xml". Copy and paste the contents of that file into the
>>> mailing list.
>>>
>>> On Mon, Jan 21, 2019 at 10:23 AM Marco Shmerykowsky PE via samba <
>>> samba at lists.samba.org> wrote:
>>>
>>>> user configuration -> Preferences -> Windows Settings -> Drive Maps
>>>>
>>>> Item Level Targeting -> Security Group, Domain Users
>>>>
>>>> On 1/21/2019 11:09 AM, Luke Barone via samba wrote:
>>>>> Where is the policy targeting - the user or the computer?
>>>>>
>>>>>
>>>>> On Mon, Jan 21, 2019 at 7:51 AM Marco Shmerykowsky PE via samba <
>>>>> samba at lists.samba.org> wrote:
>>>>>
>>>>>> I seem to be having trouble getting group policies
>>>>>> to map a drive.  When I drilled down thru the logs
>>>>>> I get an "Access Denied" message.
>>>>>>
>>>>>> I can navigate to the share via the computer browser
>>>>>> and map a drive the "old fashion way" with any issues.
>>>>>> Files can be read and written.
>>>>>>
>>>>>> The group policy doesn't seem to take.  Suggestions?
>>>>>>
>>>>>> Thank you.
>>>>>>
>>>>>> --
>>>>>> To unsubscribe from this list go to the following URL and read the
>>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>
>>>> --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba