[Samba] Sysvol issues after DC migration

[Oleg Blyahher]

I did that, now I can view/edit all GPOs, and both sysvolreset and 
sysvolcheck have completed without errors.

Thank you Rowland and Louis! I really hope people will find this thread 
in the future as it guides through the entire process of fixing things 
step by step :)

All the best

Oleg

On 2021-03-16 17:11, Rowland penny via samba wrote:
> On 16/03/2021 15:41, Oleg Blyahher via samba wrote:
>> Yup, you are absolutely right, in both GPO management and 'samba-tool 
>> gpo listall' I get 4 GPOs, but only 3 are listed in 
>> /var/lib/samba/sysvol/domain.com/Policies
>>
>> The one missing there is "*Default Domain Controllers Policy*", aka 
>> {6AC1786C-016F-11D2-945F-00C04FB984F9}
>>
>> Should I delete this policy from AD? Or maybe recreate the internal 
>> structure somehow? 'samba-tool gpo create ....'?
>
>
> No, it is one of the default GPO's and is basically empty, so should 
> be easy to recreate, try these commands:
>
> mkdir /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}
> chown 'domain admins:'domain admins' /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}
>
> mkdir /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}/MACHINE
> chown 'domain admins:'domain admins' /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}/MACHINE
>
> mkdir /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}/USER
> chown 'domain admins:'domain admins' /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}/USER
>
> printf "[General]\nVersion=0\n" > /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}/GPT.INI
> unix2dos /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}/GPT.INI
> chown 'domain admins:'domain admins' /var/lib/samba/sysvol/$(hostname 
> -d)/Policies/\{6AC1786C-016F-11D2-945F-00C04FB984F9\}/GPT.INI
>
> Rowland
>
>
>