Web lists-archives.com

Re: [Samba] Samba 4 -> Group Policy Drive Map -> Access Denied




Thanks.  Just ran "samba-tool ntacl sysvolrest" and that seems
to have fixed the issue.

On 1/21/2019 2:11 PM, Luke Barone via samba wrote:
OK, the preference is set correctly. Have you run a "samba-tool ntacl
sysvolcheck" on your first domain controller? That will check the
permissions. If you have additional domain controllers, ensure you're
connecting to the one holding the PDC Emulator role (typically your first
DC) in your GPMC.

If the sysvolcheck says everything is fine, and you only have one domain
controller, then we'll have more troubleshooting to do.

On Mon, Jan 21, 2019 at 10:37 AM Marco Shmerykowsky via samba <
samba@xxxxxxxxxxxxxxx> wrote:

<?xml version="1.0" encoding="utf-8"?>
<Drives clsid="{8FDDCC1A-0C3C-43cd-A6B4-71A6DF20DA8C}"><Drive
clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="W:" status="W:"
image="2" changed="2019-01-21 18:36:07"
uid="{6524E6E3-E107-48CC-9973-406E16B5F34D}" userContext="1"
bypassErrors="1"><Properties action="U" thisDrive="SHOW" allDrives="SHOW"
userName="" path="\\sce251\test-share" label="SHARE" persistent="1"
useLetter="1" letter="W"/><Filters/></Drive>
</Drives>

On Mon, January 21, 2019 1:27 pm, Luke Barone via samba wrote:
OK, remove the Item Level Targeting - that should hit all Domain Users
anyways.

Can you extract the .XML file that is made from that policy? Go to your
SYSVOL\<domain>\Policies\<GUID for Policy>\User\Preferences\Drives, and
open up "Drives.xml". Copy and paste the contents of that file into the
mailing list.

On Mon, Jan 21, 2019 at 10:23 AM Marco Shmerykowsky PE via samba <
samba@xxxxxxxxxxxxxxx> wrote:

user configuration -> Preferences -> Windows Settings -> Drive Maps

Item Level Targeting -> Security Group, Domain Users

On 1/21/2019 11:09 AM, Luke Barone via samba wrote:
Where is the policy targeting - the user or the computer?


On Mon, Jan 21, 2019 at 7:51 AM Marco Shmerykowsky PE via samba <
samba@xxxxxxxxxxxxxxx> wrote:

I seem to be having trouble getting group policies
to map a drive.  When I drilled down thru the logs
I get an "Access Denied" message.

I can navigate to the share via the computer browser
and map a drive the "old fashion way" with any issues.
Files can be read and written.

The group policy doesn't seem to take.  Suggestions?

Thank you.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba