DC must ignore all unix permissions for SYSVOL to function properly for GPO (domain users do not log into the unix as opposed to member server).

2023-01-20 23:05:40 +01:00
parent b800093b1d
commit 6feb2e9aeb
1 changed files with 4 additions and 0 deletions
--- a/smb.conf.j2
+++ b/smb.conf.j2
@@ -17,3 +17,7 @@
 	winbind refresh tickets = Yes
 	winbind use default domain = {{ WINBIND_USE_DEFAULT_DOMAIN }}

+	inherit acls = yes
+	inherit owner = yes
+	inherit permissions = yes
+	acl_xattr:ignore system acls = yes