[Samba] Missing Policies folder in AD and /var/lib/samba/sysvol

[Rowland Penny]

On Tue, 18 Mar 2025 19:36:38 -0600
Rick Hollinbeck via samba <samba at lists.samba.org> wrote:

> Thanks, Rowland.
> 
> Yes, I think you're right that the original default GPOs didn't
> migrate from Window Server when I did the original Join.
> 
> Who knows why.

Probably because when joining a Samba DC to an existing AD domain,
there is no code to do this.

> 
> The default GPO's seem to be fixed as GUID 
> {31B2F340-016D-11D2-945F-00C04FB984F9}/gpt.ini

There are actually two default policies.

> 
> I will try to provision a new samba fake domain to see if it will 
> generate these files in /var/lib.

It should.

> 
> Would copying the created Policies subfolder to /var/lib/samba/sysvol 
> location be sufficient to get it into AD?

Probably, as you are supposed to sync Sysvol from the first DC in a
Samba domain to any other subsequent DCs you join.

> 
> Let me know if you happen to find that script file to just recreate
> the files.... :-)

It will probably require 'dusting' off, it is quite a few years ago
since I wrote it, but let me know if you require it and I will find it,
it is in a backup folder somewhere.

Rowland