[Samba] How to sort out GPO problems

[Rommel Rodriguez Toirac]

El 15 de febrero de 2021 11:15:49 GMT-05:00, Rowland penny via samba <samba at lists.samba.org> escribió:
>On 15/02/2021 15:43, Rommel Rodriguez Toirac via samba wrote:
>> Hello;
>> A few months ago I installed an additional domain controller on my
>network, directory replication worked fine and then I transferred all
>roles to this new AD DC. I never shut down or discontinued the other
>server.
>>    
>>    Old Active Directory Domain Controller - gtmad.gtm.onat.gob.cu - 
>192.168.41.17 - CentOS 7
>>    New Active Directory Domain Controller - gtmad1.gtm.onat.gob.cu -
>192.168.41.18 - CentOS 8
>>    
>>   Recently I have realized that in this new server there are no GPOs
>
>
>One of the limitations of Samba DC's, there is no Sysvol replication, 
>try reading this:
>
>https://wiki.samba.org/index.php/SysVol_replication_(DFS-R)
>
>Follow the links.
>
>Rowland



 Thank Rowland for write me back.

 In case I want to created others GPOs, other than the ones that exist in the old Domain Controller, if I want to created new ones, what should I do?

 I guess that if I change the permissions to   /usr/local/samba/var/locks/sysvol/ to root (owner) - BUILTIN\Administrators (group) I be able to create new GPOs. 

 How to change the permissions? 

(chown root:BUILIN\Administrators /usr/local/samba/var/locks/sysvol/ is not well)

-- 
Rommel Rodriguez Toirac
rommelrt at nauta.cu