[Samba] Samba 4 -> Group Policy Drive Map -> Access Denied

[Marco Shmerykowsky PE]

Samba Version 4.9.4-Debian
Debian GNU/Linux 9 (stretch)

On 1/22/2019 2:38 AM, L.P.H. van Belle via samba wrote:
> Hai,
> 
> If you dont mind to share the OS and Samba version you are using?
> 
> Because we dont see this much:
>> Thanks.  Just ran "samba-tool ntacl sysvolrest" and that seems
>> to have fixed the issue.
> 
> 
> Greetz,
> 
> Louis
> 
>   
> 
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
>> Marco Shmerykowsky PE via samba
>> Verzonden: maandag 21 januari 2019 20:21
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] Samba 4 -> Group Policy Drive Map ->
>> Access Denied
>>
>> Thanks.  Just ran "samba-tool ntacl sysvolrest" and that seems
>> to have fixed the issue.
> 
> 
>>
>> On 1/21/2019 2:11 PM, Luke Barone via samba wrote:
>>> OK, the preference is set correctly. Have you run a
>> "samba-tool ntacl
>>> sysvolcheck" on your first domain controller? That will check the
>>> permissions. If you have additional domain controllers,
>> ensure you're
>>> connecting to the one holding the PDC Emulator role
>> (typically your first
>>> DC) in your GPMC.
>>>
>>> If the sysvolcheck says everything is fine, and you only
>> have one domain
>>> controller, then we'll have more troubleshooting to do.
>>>
>>> On Mon, Jan 21, 2019 at 10:37 AM Marco Shmerykowsky via samba <
>>> samba at lists.samba.org> wrote:
>>>
>>>> <?xml version="1.0" encoding="utf-8"?>
>>>> <Drives clsid="{8FDDCC1A-0C3C-43cd-A6B4-71A6DF20DA8C}"><Drive
>>>> clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="W:"
>> status="W:"
>>>> image="2" changed="2019-01-21 18:36:07"
>>>> uid="{6524E6E3-E107-48CC-9973-406E16B5F34D}" userContext="1"
>>>> bypassErrors="1"><Properties action="U" thisDrive="SHOW"
>> allDrives="SHOW"
>>>> userName="" path="\\sce251\test-share" label="SHARE" persistent="1"
>>>> useLetter="1" letter="W"/><Filters/></Drive>
>>>> </Drives>
>>>>
>>>> On Mon, January 21, 2019 1:27 pm, Luke Barone via samba wrote:
>>>>> OK, remove the Item Level Targeting - that should hit all
>> Domain Users
>>>>> anyways.
>>>>>
>>>>> Can you extract the .XML file that is made from that
>> policy? Go to your
>>>>> SYSVOL\<domain>\Policies\<GUID for
>> Policy>\User\Preferences\Drives, and
>>>>> open up "Drives.xml". Copy and paste the contents of that
>> file into the
>>>>> mailing list.
>>>>>
>>>>> On Mon, Jan 21, 2019 at 10:23 AM Marco Shmerykowsky PE via samba <
>>>>> samba at lists.samba.org> wrote:
>>>>>
>>>>>> user configuration -> Preferences -> Windows Settings ->
>> Drive Maps
>>>>>>
>>>>>> Item Level Targeting -> Security Group, Domain Users
>>>>>>
>>>>>> On 1/21/2019 11:09 AM, Luke Barone via samba wrote:
>>>>>>> Where is the policy targeting - the user or the computer?
>>>>>>>
>>>>>>>
>>>>>>> On Mon, Jan 21, 2019 at 7:51 AM Marco Shmerykowsky PE
>> via samba <
>>>>>>> samba at lists.samba.org> wrote:
>>>>>>>
>>>>>>>> I seem to be having trouble getting group policies
>>>>>>>> to map a drive.  When I drilled down thru the logs
>>>>>>>> I get an "Access Denied" message.
>>>>>>>>
>>>>>>>> I can navigate to the share via the computer browser
>>>>>>>> and map a drive the "old fashion way" with any issues.
>>>>>>>> Files can be read and written.
>>>>>>>>
>>>>>>>> The group policy doesn't seem to take.  Suggestions?
>>>>>>>>
>>>>>>>> Thank you.
>>>>>>>>
>>>>>>>> --
>>>>>>>> To unsubscribe from this list go to the following URL
>> and read the
>>>>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>>>
>>>>>> --
>>>>>> To unsubscribe from this list go to the following URL
>> and read the
>>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>> --
>>>>> To unsubscribe from this list go to the following URL and read the
>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>
>>>>
>>>>
>>>> --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
> 
>