[Samba] Problems with GPO

[Marcio Demetrio Bacci]

Hi,

 I assigned the permissions of authenticated users on the share, but the
problem persists.

I do tests outside of office hours and it always works and people who log
on to the network before the start of working hours have no problems. Thus,
I believe that this problem occurs in the first hour of the beginning of
the working day and then the mappings will return to work normally with the
GPO. All of my DCs and the file server are virtual machines on the KVM. The
DCs have 4GB RAM, 1GB Swap and 2 processors. The file server has 16GB RAM,
4GB Swap and 2 processors. I see that the servers have a little free RAM
due to the buffer cache. Example:

free -m

total used free shared buff / cache available

Mem: 16042 5628 169 68 10245 10016

Swap: 3999 3999 0

I can calmly increase the resources of the virtual servers, however I see
that if the buffer cache is released, the servers will still have enough
resources to use. So, the cause of the problem of sometimes working and
sometimes not working via GPO mapping could be caused by any problem of
resource management by the server? Is there any way to do some tuning to
optimize resource management?

I have only 500 users on the network, so it would take more than 16 GB RAM,
4 GB Swap and 2 processors to meet the demand?


I have no more ideas of what could cause this problem.


Regards,

Márcio Bacci

Em qui., 2 de jul. de 2020 às 11:40, L.P.H. van Belle via samba <
samba at lists.samba.org> escreveu:

> see inbetween the tekst.
>
> Van: Marcio Demetrio Bacci [mailto:marciobacci at gmail.com]
> Verzonden: donderdag 2 juli 2020 14:19
> Aan: L.P.H. van Belle
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Problems with GPO
>
>
>
> Hi,
>
> By assigning the permission of authenticated users, will this allow users
> in one group, for example, financial, to access the shares of other groups,
> such as administrative or directorship or the other way around?
>
> My shares look like this:
> Company (is the first level)
>  ->Financial (second level)
>  ->Administrative (second level)
>  ->Management (second level)
>  ->Directorship (second level)
>
>
>
> For the user group I map the drive like this: \\SERVER\Financial  -
> \\SERVER \Administrative  etc.
>
>
>
> This way, Do I need assign permission of authenticated users for all the
> shares above ?
> No, only where the GPO is used but if needed you can add it just make your
> the subfolder dont inherit the access..
>
> If you have a share that also deploys software (VIA GPO), create a
> separted share for that.
> That avoids possible problems and give more flexibility.
>
>
> Greetz,
>
> Louis
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>