無法從 samba DC 更新電腦策略

我正在嘗試向我的客戶推出 CA 證書，但他們的組策略沒有更新。當我嘗試gpupdate /force時，我得到：

Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file
\\[domain]\sysvol\[domain]\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini
from a domain controller and was not successful. Group Policy settings
may not be applied until this event is resolved. This issue may be transient and
could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy update has completed successfully.

To diagnose the failure, review the event log or run GPRESULT /H GPReport.html
from the command line to access information about Group Policy results.

我可以\\[domain]\sysvol\[domain]\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini毫無問題地在文件資源管理器中訪問。

我該如何解決？

我知道這是某種權限錯誤。最終我發現只需samba-tool ntacl sysvolreset在 DC 上以 root 身份執行命令即可修復它。

引用自：https://serverfault.com/questions/904703