Bug 13627 - Missing gPCMachineExtensionNames attributes import GPO
Summary: Missing gPCMachineExtensionNames attributes import GPO
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.9.0
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
Depends on:
Reported: 2018-09-21 14:47 UTC by Kevin Guerineau
Modified: 2018-09-21 14:47 UTC (History)
1 user (show)

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Kevin Guerineau 2018-09-21 14:47:29 UTC
Hi everyone,

I am going through GPO Import/Export functionnality. 

Using Samba 4.10 Git master from earlier this week

When restoring a GPO (startup script GPO), the gPCMachineExtensionNames attributes is not created on the CN={GPO_GUID},CN=Policies,CN=System. For instance it missing the following attributes and value:

gPCMachineExtensionNames: [{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}]

The GPO details does not appear in the "setting" tab of the GPO management console from RSAT, and it does not apply properly on the desktop.

Adding the above mentionned attribute make it appears in the console. 


Kévin and Denis

How to reproduce

To reproduce the bug
* create a startup script GPO using RSAT Management console
* export that startup script GPO using samba-tool gpo backup
* delete the GPO
* restore the GPO using samba-tool gpo restore

To show the difference
* do a ldbsearch dump of the GPO
* edit the buggy GPO using RSAT and just add a space somewhere in the startup script and save it.
* do a ldbsearch dump of the GPO and diff