[Samba] Domain Admin can't create GPO

basti mailinglist at unix-solution.de
Thu Mar 12 14:16:56 UTC 2020


Fixed, no Write permission on sysvol share.

On 11.03.20 09:09, basti via samba wrote:
> I have setup an samba 4 AD DC.
> The Domain Administrator SAMDOM\Administrator can't create GPO (access
> denied).
> SAMDOM\Administrator is member of Domain Admins group.
> 
> I have try
> samba-tool ntacl sysvolreset
> samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix
> samba-tool dbcheck --cross-ncs --fix
> 
> without success.
> 
> 



More information about the samba mailing list