Created attachment 8148 [details] this removes the fileserver.conf file (needed to ensure samba-tool ntacl uses the right parameters) These patches appear to resolve some of the sysvol ACL issues. We have had very positive feedback about ACLs since this patch (more than seems to make sense), but clearly this is one of the required steps.
Created attachment 8149 [details] This sets the mask parameters to 0777
Note: the description of the attachments was the confused. But the patches as such are good. So be sure to first apply the mask setting patch which is attachment #8148 [details] and not #8149 despite the description. :-) ==> Karolin for 4.0
Pushed to v4-0-test. Closing out bug report. Thanks!