[Samba] GPO Editor says "Access denied" for Group Policy Objects

Jakob Curdes jc at info-systems.de
Thu Apr 25 19:11:02 UTC 2024


Am 25.04.2024 um 19:59 schrieb Rowland Penny via samba:
> I suspect that I forgot to set the idmap config on the DC(s)
> accordingly?
> Do not set idmap config lines on a Samba DC, they do not work, you must
> use the 3000000 numbers or use rfc2307 attributes (uidNumber,
> gidNumber, etc)
>
> Have you read this:
>
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Granting_the_SeDiskOperatorPrivilege_Privilege
>
Yes, but rereading it and the mail thread I think I will try to sanitize 
my configs and then go through that page again. But I would like to do 
this with hands-on to the domain as it is in production, so this will 
have to wait until next week.

I will try to heed your hints and get back with a result.

Thank you and best regards, Jakob


More information about the samba mailing list