[Samba] GPO Issue after adding second DC -> winning gpo Result: Failure (Error Code: 0x80070035)

[Rowland penny]

On 28/01/2021 18:54, Marco Shmerykowsky via samba wrote:
>
>
> Just to add to this:
>
> If I run 'samba-tool ntacl sysvolcheck' on either server I get the 
> following:

I know you are syncing sysvol between the two DC's, but are you also 
syncing idmap.ldb from the first DC to the second ?

If you aren't, then you will probably have different xidNumbers on each DC.

Rowland