[Samba] sysvolreset and GPO permissions

[Rowland penny]

On 02/04/2021 15:38, Jake Black wrote:
> Yes I followed the steps on the wiki to sync the idmap after the new 
> DC was joined.
>
> This is on 4.12.5 if that matters.
>

OK, create a script with the following content:

#!/bin/bash

UIDS="3000000 3000032 3000049 3000050 3000062 3000063"

GIDS="3000049 3000050"

for uid in $UIDS
do
     SID=$(wbinfo --uid-to-sid="$uid")
     WHO=$(wbinfo --sid-to-name="$SID")
     echo "ID '$uid' Has SID '$SID' with the name '$WHO'"
done

for gid in $GIDS
do
     SID=$(wbinfo --gid-to-sid="$gid")
     WHO=$(wbinfo --sid-to-name="$SID")
     echo "ID '$gid' Has SID '$SID' with the name '$WHO'"
done

exit 0

Then run it on both DC's, you should get the same output, if you do not, 
try running 'net cache flush' on the second DC and try the script again.

Rowland