[Samba] How to sort out GPO problems

[Rowland penny]

On 15/02/2021 17:01, Rommel Rodriguez Toirac via samba wrote:
> El 15 de febrero de 2021 11:15:49 GMT-05:00, Rowland penny via samba <samba at lists.samba.org> escribió:
>> On 15/02/2021 15:43, Rommel Rodriguez Toirac via samba wrote:
>>> Hello;
>>> A few months ago I installed an additional domain controller on my
>> network, directory replication worked fine and then I transferred all
>> roles to this new AD DC. I never shut down or discontinued the other
>> server.
>>>     
>>>     Old Active Directory Domain Controller - gtmad.gtm.onat.gob.cu -
>> 192.168.41.17 - CentOS 7
>>>     New Active Directory Domain Controller - gtmad1.gtm.onat.gob.cu -
>> 192.168.41.18 - CentOS 8
>>>     
>>>    Recently I have realized that in this new server there are no GPOs
>>
>> One of the limitations of Samba DC's, there is no Sysvol replication,
>> try reading this:
>>
>> https://wiki.samba.org/index.php/SysVol_replication_(DFS-R)
>>
>> Follow the links.
>>
>> Rowland
>
>
>   Thank Rowland for write me back.
>
>   In case I want to created others GPOs, other than the ones that exist in the old Domain Controller, if I want to created new ones, what should I do?
>
>   I guess that if I change the permissions to   /usr/local/samba/var/locks/sysvol/ to root (owner) - BUILTIN\Administrators (group) I be able to create new GPOs.
>
>   How to change the permissions?
>
> (chown root:BUILIN\Administrators /usr/local/samba/var/locks/sysvol/ is not well)
>

Read the wiki pages I pointed you to.

Rowland