[Samba] after edit gpo with RSAT sysvol acls are invalid

[Rowland Penny]

On Tue, 8 Sep 2026 17:53:30 +0200
Giuseppe Arvati via samba <samba at lists.samba.org> wrote:

> 
> > I notice you are using rfc2307 for idmap, have you given Domain
> > Admins a gidNumber attribute ?
> 
> No
> 

Hmm, that is the usual problem, giving Domain Admins a gidNumber turns
it into a Unix group.

Can you post the output of:

getent passwd Domain\ Admins

getent group Domain\ Admins

getent passwd Administrators

getent group Administrators

samba-tool ntacl sysvolcheck

Rowland