Hallo Zusammen,
ich hab derzeit an einer Schule das Problem, dass sicher Drucker nicht per GPO verbinden lassen. Außerdem ist auch etwas mit dem linuxmuster-import-devices schief:
Linuxmuster-import-devices wirft an dieser Stelle fehler aus:
OK (0): smbcacls-NTACL on //server/default-school iso
DONE with 17) Line 32: SMB::@@SCHOOL@@/iso/::root::root::0755::school-iso.ntacl:: ---
#### Repairing from file: repdir.school (end) ####
#### Repairing from file: repdir.global (start) ####
------------------------------------------------------------
1) Line 6: LINUX::$homedir_global/::root::root::0755::noacl:::
chown root.root /srv/samba/global
DONE with 1) Line 6: LINUX::$homedir_global/::root::root::0755::noacl:: ---
------------------------------------------------------------
2) Line 7: SMB::$homedir_global/::root::root::0755::global.ntacl::ntaclonly:::
* NOT executed (ntaclonly): smbclient command
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /
--set "REVISION:1,OWNER:LINUXMUSTER\global-admins,GROUP:S-1-22-2-0,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI/FULL,ACL:LINUXMUSTER\global-students:ALLOWED/0x0/READ,ACL:LINUXMUSTER\global-teachers:ALLOWED/0x0/READ,ACL:LINUXMUSTER\SCHOOLS:ALLOWED/0x0/READ,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 2) Line 7: SMB::$homedir_global/::root::root::0755::global.ntacl::ntaclonly:: ---
------------------------------------------------------------
3) Line 9: SMB::$homedir_global/$directory_students/::root::root::0755::global-students.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/students"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /students
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /students
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\global-students:ALLOWED/0x0/READ,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI/FULL,ACL:LINUXMUSTER\global-teachers:ALLOWED/0x0/READ,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 3) Line 9: SMB::$homedir_global/$directory_students/::root::root::0755::global-students.ntacl:: ---
------------------------------------------------------------
4) Line 11: SMB::$homedir_global/$directory_teachers/::root::root::0755::global-teachers.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/teachers"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /teachers
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /teachers
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\global-teachers:ALLOWED/0x0/READ,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI/FULL,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 4) Line 11: SMB::$homedir_global/$directory_teachers/::root::root::0755::global-teachers.ntacl:: ---
------------------------------------------------------------
5) Line 13: SMB::$homedir_global/$directory_management/::root::root::0755::global-management.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/management"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /management
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /management
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\global-admins:ALLOWED/0x0/FULL,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 5) Line 13: SMB::$homedir_global/$directory_management/::root::root::0755::global-management.ntacl:: ---
------------------------------------------------------------
6) Line 15: SMB::$homedir_global/$directory_share/::root::root::0755::global-share.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/share"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /share
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /share
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\all-students:ALLOWED/OI|CI/READ,ACL:LINUXMUSTER\all-teachers:ALLOWED/OI|CI/READ,ACL:LINUXMUSTER\all-admins:ALLOWED/OI|CI/READ,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI|I/FULL,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 6) Line 15: SMB::$homedir_global/$directory_share/::root::root::0755::global-share.ntacl:: ---
------------------------------------------------------------
7) Line 16: SMB::$homedir_global/$directory_share/projects::root::root::0755::global-share-projects.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/share/projects"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /share/projects
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /share/projects
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI/FULL,ACL:LINUXMUSTER\global-students:ALLOWED/0x0/READ,ACL:LINUXMUSTER\global-teachers:ALLOWED/0x0/READ,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 7) Line 16: SMB::$homedir_global/$directory_share/projects::root::root::0755::global-share-projects.ntacl:: ---
------------------------------------------------------------
8) Line 17: SMB::$homedir_global/$directory_share/global::root::root::0755::global-share-global.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/share/global"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /share/global
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /share/global
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\all-students:ALLOWED/OI|CI/READ,ACL:LINUXMUSTER\all-teachers:ALLOWED/0x0/RWX,ACL:LINUXMUSTER\all-teachers:ALLOWED/OI|CI|IO/FULL,ACL:LINUXMUSTER\all-admins:ALLOWED/0x0/RWX,ACL:LINUXMUSTER\all-admins:ALLOWED/OI|CI|IO/FULL,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI/FULL,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 8) Line 17: SMB::$homedir_global/$directory_share/global::root::root::0755::global-share-global.ntacl:: ---
------------------------------------------------------------
9) Line 18: SMB::$homedir_global/$directory_share/management::root::root::0755::global-share-management.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/share/management"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /share/management
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /share/management
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI/FULL,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 9) Line 18: SMB::$homedir_global/$directory_share/management::root::root::0755::global-share-management.ntacl:: ---
------------------------------------------------------------
10) Line 20: SMB::$homedir_global/$directory_program/::root::root::0755::global-program.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/program"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /program
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /program
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\all-students:ALLOWED/0x0/READ,ACL:LINUXMUSTER\all-teachers:ALLOWED/0x0/READ,ACL:LINUXMUSTER\all-admins:ALLOWED/0x0/READ,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI|I/FULL,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
DONE with 10) Line 20: SMB::$homedir_global/$directory_program/::root::root::0755::global-program.ntacl:: ---
------------------------------------------------------------
11) Line 22: SMB::$homedir_global/iso/::root::root::0755::global-iso.ntacl:::
ERROR: smb command
COMMAND:
/usr/bin/smbclient -U administrator%'******' //server/linuxmuster-global -c 'mkdir "/iso"'
RETURN VALUE: 256
ERROR MESSAGE:
tree connect failed: NT_STATUS_ACCESS_DENIED
cli_full_connection failed! (NT_STATUS_ACCESS_DENIED)
ERROR: smbcacls-NTACL on //server/linuxmuster-global /iso
COMMAND:
/usr/bin/smbcacls -U administrator%'******' //server/linuxmuster-global /iso
--set "REVISION:1,OWNER:LINUXMUSTER\Domain Admins,GROUP:LINUXMUSTER\Domain Users,ACL:LINUXMUSTER\all-admins:ALLOWED/0x0/READ,ACL:LINUXMUSTER\all-students:ALLOWED/0x0/READ,ACL:LINUXMUSTER\all-teachers:ALLOWED/0x0/READ,ACL:LINUXMUSTER\global-admins:ALLOWED/OI|CI|I/FULL,ACL:LINUXMUSTER\Domain Admins:ALLOWED/OI|CI|I/FULL"
RETURN VALUE: 256
ERROR MESSAGE:
Am Client sollen merhere Drucker per GPO zugeordnet werden. Einer der Drucker funktioniert, alle weiteren Antworten mit dieser Fehlermeldung:
Protokollname: Application
Quelle: Group Policy Printers
Datum: 14.07.2023 11:22:19
Ereignis-ID: 4098
Aufgabenkategorie:(2)
Ebene: Warnung
Schlüsselwörter:Klassisch
Benutzer: SYSTEM
Computer: a114-1.Linuxmuster
Beschreibung:
Das Benutzer "a118-drucker"-Einstellungselement im Gruppenrichtlinienobjekt "a118-drucker {28EE7FD1-75DF-402D-B087-40BF717BCD70}" wurde aufgrund eines Fehlers nicht angewendet. Fehlercode: "0x800706fd Die Vertrauensstellung zwischen dieser Arbeitsstation und der primären Domäne konnte nicht hergestellt werden." Dieser Fehler wurde unterdrückt..
Ereignis-XML:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Group Policy Printers" />
<EventID Qualifiers="34305">4098</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>2</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2023-07-14T09:22:19.8270717Z" />
<EventRecordID>4424</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>a114-1.CDS-TT</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>Benutzer</Data>
<Data>a118-drucker</Data>
<Data>a118-drucker {28EE7FD1-75DF-402D-B087-40BF717BCD70}</Data>
<Data>0x800706fd Die Vertrauensstellung zwischen dieser Arbeitsstation und der primären Domäne konnte nicht hergestellt werden.</Data>
</EventData>
</Event>
Diese Fehlermeldung kenne ich eigentlich nur, wenn man sich nicht am Client anmelden kan. Das Funktioniert in der Tat aber komplett ohne Probleme.
Hat jemand eine Idee woran das liegen könnte?