Samba 4 AD DC not working right
by Phunction from LinuxQuestions.org on (#6E611)
Hi, I have setup an LXC container with ubuntu lobster, Samba 4.17.7 in an active directory dc.
(i followed the samba wiki and other sites on setting up and provisioning)
I almost have it working, I can join windows 10/11 computers but the login does not work quite right.
When a user logs in I get the error that they can't be signed in and event viewer shows this:
"Windows could not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrators group must be the owner of the folder. "
I tried using pdbedit to set the profile path to the users home folder and also tried a GPO.
(gpresult /R does show the GPO is being applied)
For example if I set the profile path to //home/user/winprofile, the folder winprofile is created but I still get the error.
I have been reading and trying thins for days but I cannot get it to logon properly.
It looks like some kind of permission error but I can't find what it would be.
Any help would be appreciated.
(i followed the samba wiki and other sites on setting up and provisioning)
I almost have it working, I can join windows 10/11 computers but the login does not work quite right.
When a user logs in I get the error that they can't be signed in and event viewer shows this:
"Windows could not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrators group must be the owner of the folder. "
I tried using pdbedit to set the profile path to the users home folder and also tried a GPO.
(gpresult /R does show the GPO is being applied)
For example if I set the profile path to //home/user/winprofile, the folder winprofile is created but I still get the error.
I have been reading and trying thins for days but I cannot get it to logon properly.
It looks like some kind of permission error but I can't find what it would be.
Any help would be appreciated.