Author Topic: [SOLVED] Zentyal 7, can't create or edit GPO's  (Read 1802 times)

Kevinsky86

  • Zen Apprentice
  • *
  • Posts: 9
  • Karma: +4/-0
    • View Profile
[SOLVED] Zentyal 7, can't create or edit GPO's
« on: February 24, 2021, 12:21:11 pm »
Installed a fresh Zentyal 7 machine. (KVM vm on Proxmox cluster)

Functionally OK, put a computer in the domain.
Can log in, create users and all that.

However with RSAT if I try to do anything with the default GPO, or create additional ones it gives me an "access denied" error.
I am a member of both Domain Admins (which IMO is what i need for GPO changes) and Schema admins group.

Tried to create a new user account that I also bombarded Domain admin.
Can log in as this user just fine but also cannot change any GPO's under this new user.

I feel like this should just work out of the box, no? Or am i missing something?

Edit: I also used my acount to put this computer in the domain to begin with.
« Last Edit: February 25, 2021, 02:35:09 pm by Kevinsky86 »

Kevinsky86

  • Zen Apprentice
  • *
  • Posts: 9
  • Karma: +4/-0
    • View Profile
Re: Zentyal 7, can't create or edit GPO's
« Reply #1 on: February 25, 2021, 02:34:57 pm »
After running "samba-tool ntacl sysvolreset" i could edit and create group policy objects.
« Last Edit: February 25, 2021, 02:38:32 pm by Kevinsky86 »

badapple7

  • Zen Apprentice
  • *
  • Posts: 26
  • Karma: +10/-0
    • View Profile
Re: [SOLVED] Zentyal 7, can't create or edit GPO's
« Reply #2 on: February 27, 2021, 11:17:20 pm »
In other topic a user similar problem, possible the reset sysvol working!

kismetgerald

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: [SOLVED] Zentyal 7, can't create or edit GPO's
« Reply #3 on: March 22, 2022, 11:44:21 pm »
Thanks for sharing your solution.  I, too, ran into this very problem and running "samba-tool ntacl sysvolreset" resolved it for me.  It would be helpful, if the developers would see this and try to determine what the root cause is and find a way to mitigate it.

victorlclopes

  • Zen Apprentice
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Re: [SOLVED] Zentyal 7, can't create or edit GPO's
« Reply #4 on: May 04, 2022, 03:06:04 pm »
+1 here. I had the same problem and "sudo samba-tool ntacl sysvolreset" just resolved the issue immediately. Thank you so much! I just want to add that some policy options were also missing, I mean there was no Windows Settings > Security Settings > Account Policies, for example. And running the command solved that too.