[Samba] SAMBA AD DC - Windows explorer.exe crashes on security tab access

[Rowland penny]

On 16/07/2019 14:27, Joachim Lindenberg via samba wrote:
> 1)	I agree to Rowland that there is a bug in Windows Explorer. Client software shall never crash in case it get´s unexpected responses from a server but display an error message. However I don´t expect a fix soon, as it is probably triggered very infrequently except for...
>
> 2)	There is probably a bug in Samba with ACL mapping for linux created directories.  You may want to compare the ACLs displayed for a windows created directory to one created by linux, using samba-tool ntacl. You may want to create an ACL on linux to prevent the crash. Nevertheless, Samba should not return anything to the client that causes clients to crash, but maybe an ACL that just contains SYSTEM.

No, there isn't a Samba bug, it is just that Samba has never used the 
same ACL's for Sysvol as the ones that Windows uses.

I tried to fix this once, but failed because the ntacl C code didn't 
know all the Windows users (or was it groups?)

see bug: https://bugzilla.samba.org/show_bug.cgi?id=12924

Rowland