[Samba] Group policy not applied problem

Olaf Frączyk olaf at navi.pl
Thu May 29 13:32:40 UTC 2025


Hello,

I try to get group policies working.

I have created a test policy for a group of computers 
"Workstations-Promienista".

The group has one computer now: "SUNSHINE".

The policy is generated on the samba server sysvol: 
{CF9B4F2F-9CB4-4A36-A5A0-91D18A20655B}.

[root at dc1 Policies]# tree
.
├── {31B2F340-016D-11D2-945F-00C04FB984F9}
│   └── GPT.INI
├── {6AC1786C-016F-11D2-945F-00C04FB984F9}
│   └── GPT.INI
├── {7AE52791-EC45-43AA-8289-022DF5AB0AFC}
│   ├── GPT.INI
│   ├── Machine
│   └── User
│       ├── Applications
│       ├── comment.cmtx
│       ├── Documents & Settings
│       ├── Registry.pol
│       └── Scripts
│           ├── Logoff
│           └── Logon
└── {CF9B4F2F-9CB4-4A36-A5A0-91D18A20655B}
     ├── GPT.INI
     ├── Machine
     │   ├── comment.cmtx
     │   └── Registry.pol
     └── User

13 directories, 8 files

However it is not applied on the target computer:

PS C:\WINDOWS\system32> gpresult /r /scope computer

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
© Microsoft Corporation. All rights reserved.

Created on ‎2025-‎05-‎29 at 15:02:31


RSOP data for  on SUNSHINE : Logging Mode
------------------------------------------

OS Configuration:            Member Workstation
OS Version:                  10.0.19045
Site Name:                   Default-First-Site-Name
Roaming Profile:
Local Profile:
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=SUNSHINE,CN=Computers,DC=navidom,DC=office,DC=navi,DC=pl
     Last time Group Policy was applied: 2025-05-29 at 14:51:50
     Group Policy was applied from: dc2.navidom.office.navi.pl 
<http://dc2.navidom.office.navi.pl>
     Group Policy slow link threshold:   500 kbps
     Domain Name:                        NAVIDOM
     Domain Type:                        Windows 2008 or later

     Applied Group Policy Objects
     -----------------------------
         Default Domain Policy
         Local Group Policy

     The computer is a part of the following security groups
-------------------------------------------------------
         BUILTIN\Administrators
         Everyone
         BUILTIN\Users
         NT AUTHORITY\NETWORK
         NT AUTHORITY\Authenticated Users
         This Organization
         SUNSHINE$
         Domain Computers
         Workstations-Promienista
         Authentication authority asserted identity
         Claims Valid
         System Mandatory Level

Below are links to images of the created GPO on google drive:
https://drive.google.com/file/d/1RzMFYtzRFRw0TYl2YJnpV7W-H__566xW/view?usp=sharing
https://drive.google.com/file/d/1VHHgcRY4X6yZS6A28_Nb0ztq6y2VFry6/view?usp=sharing
https://drive.google.com/file/d/1fcx1YNephjvzCSkCcFzFWo_Ut50FDvkP/view?usp=sharing
https://drive.google.com/file/d/10f7h2OQ3Ok88TMTjmr2QiX3rN-uQKUr4/view?usp=sharing

Could somebody please help me find the problem?

I also tried with a user policy {7AE52791-EC45-43AA-8289-022DF5AB0AFC}, 
but it doesn't work too.

Best regards,

Olaf Frączyk



More information about the samba mailing list