[Samba] GPO fail and sysvol perm errors

[Rowland penny]

On 25/10/2020 17:31, Sonic via samba wrote:
> GPO's fail to apply on Windows clients and sysvol permission errors are logged.
> DC is Samba 4.13.0 created via a classic upgrade.
>
> Logged sysvol errors (uid 5025 is the system I ran gpupdate on, don't
> know what uid 3000011 refers to):

So '5035' is a computer, but what is '3000011' ?

You can find out by running this on the DC:

ldbsearch -H /path/to/idmap.ldb '(&(objectClass=sidMap)(xidNumber=3000011))'

You just need to ensure you use the correct path to 'idmap.ldb'

Once you find out that, you should then be able to find out why the two 
are being denied access, by examining the permissions on sysvol.

Rowland