[Samba] sysvolreset and GPO permissions

Jake Black jblack at xes-inc.com
Mon Apr 5 14:24:38 UTC 2021


Yes, that script prints the same output on both DCs 


On 02/04/2021 15:38, Jake Black wrote: 
> Yes I followed the steps on the wiki to sync the idmap after the new 
> DC was joined. 
> 
> This is on 4.12.5 if that matters. 
> 

OK, create a script with the following content: 

#!/bin/bash 

UIDS="3000000 3000032 3000049 3000050 3000062 3000063" 

GIDS="3000049 3000050" 

for uid in $UIDS 
do 
SID=$(wbinfo --uid-to-sid="$uid") 
WHO=$(wbinfo --sid-to-name="$SID") 
echo "ID '$uid' Has SID '$SID' with the name '$WHO'" 
done 

for gid in $GIDS 
do 
SID=$(wbinfo --gid-to-sid="$gid") 
WHO=$(wbinfo --sid-to-name="$SID") 
echo "ID '$gid' Has SID '$SID' with the name '$WHO'" 
done 

exit 0 

Then run it on both DC's, you should get the same output, if you do not, 
try running 'net cache flush' on the second DC and try the script again. 

Rowland 



More information about the samba mailing list