[Samba] Roaming Profiles GPO

[Peter Milesson]

On 11.12.2023 15:42, David Mulder via samba wrote:
>
> On 12/11/23 7:10 AM, Peter Milesson via samba wrote:
>> Hi Tobias,
>>
>> I have tried out the GPO handling quite extensively, and last time 
>> with Samba 4.18.6. If you are using RSAT, you can define the GPOs, 
>> but gpupdate probably will not work.  You need to open your Samba DCs 
>> and run
>>
>> samba-gpupdate --force
> All that does is apply policy to the Samba ADDC. That has nothing to 
> do with Windows GPOs.
>
Sorry for the confusion. I had problems with password length settings, 
and that was not updated with gpupdate /force under Windows. Besides, 
gpupdate /force just messed up sysvol on the AD DC. So I, retract my 
statement about samba-gpupdate --force.

I just did a test, modifying a GPO with RSAT. gpupdate /force still does 
not work, and I had to run samba-tool ntacl sysvolreset. Otherwise, 
there are errors, and the GPOs don't work.

Best regards,

Peter