[Samba] Sysvol Replication workaround seems not work

Rowland Penny rpenny at samba.org
Fri Jul 30 09:15:36 UTC 2021


On Fri, 2021-07-30 at 11:01 +0200, Thomas Kempf via samba wrote:
> 
> >  
> > You have to run sysvolreset on all DC's
> can i do this safely now having removed the gidNUmber from Domain
> Admins?

Yes

> 
> > 
> > this doesn't mean that you need to sync idmap.ldb, only if you have
made user or group changes.
> ok, but shouldn't this be done automagically by the implemented 
> "Bidirectional Rsync/Unison based SysVol replication workaround" ?

No, because that method does not sync idmap.ldb

Rowland





More information about the samba mailing list