I managed to setup a Samba domain controller following the official Samba guide. Basic user management works but group policy settings not. Every time I tried to create a group policy using Windows Group Policy Management tool, an error popped up saying “Access is Denied”. I checked the samba-ad-dc services, and this is the output:
Sep 08 11:01:15 dc mitkdc[1555]: **[2021/09/08 11:01:15.194251, 0] ../../lib/util/util_runcmd.c:352(samba_runcmd_io_handler)**
Sep 08 11:01:15 dc mitkdc[1555]: ** /usr/lib/mit/sbin/krb5kdc: krb5kdc: starting...**
Sep 08 11:01:15 dc winbindd[1568]: **[2021/09/08 11:01:15.288973, 0] ../../source3/winbindd/winbindd_cache.c:3205(initialize_winbindd_cache)**
Sep 08 11:01:15 dc smbd[1541]: **[2021/09/08 11:01:15.296548, 0] ../../lib/util/become_daemon.c:136(daemon_ready)**
Sep 08 11:01:15 dc smbd[1541]: ** daemon_ready: daemon 'smbd' finished starting up and ready to serve connections**
Sep 08 11:01:15 dc winbindd[1568]: ** initialize_winbindd_cache: clearing cache and re-creating with version number 2**
Sep 08 11:01:15 dc winbindd[1568]: **[2021/09/08 11:01:15.319017, 0] ../../lib/util/become_daemon.c:136(daemon_ready)**
Sep 08 11:01:15 dc winbindd[1568]: ** daemon_ready: daemon 'winbindd' finished starting up and ready to serve connections**
Sep 08 11:01:15 dc winbindd[1568]: **[2021/09/08 11:01:15.341657, 0] ../../lib/util/util_runcmd.c:352(samba_runcmd_io_handler)**
Sep 08 11:01:15 dc winbindd[1568]: ** /usr/sbin/samba-gpupdate: Failed to exec child - Permission denied**
I tried to setup another dc with Ubuntu. It didn’t have this error. Group policy works as intended. I already searched for solution but nothing useful showed up. Please help.
These are the guides that I followed:
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
https://wiki.samba.org/index.php/Group_Policy