1
0
mirror of https://github.com/samba-team/samba.git synced 2025-07-06 08:59:08 +03:00

s4 provision: Make GPO folder group writable

The group of this folder is domain administrator and it seems sensible
that all domain administrators have the right to modify the gpo (they
have it at the NT ACLs level ...)
This commit is contained in:
Matthieu Patou
2010-09-07 17:45:55 +04:00
parent 8a48ca4e3f
commit dfa468fd08

View File

@ -978,15 +978,15 @@ def getpolicypath(sysvolpath, dnsdomain, guid):
def create_gpo_struct(policy_path):
if not os.path.exists(policy_path):
os.makedirs(policy_path, 0755)
os.makedirs(policy_path, 0775)
open(os.path.join(policy_path, "GPT.INI"), 'w').write(
"[General]\r\nVersion=65543")
p = os.path.join(policy_path, "MACHINE")
if not os.path.exists(p):
os.makedirs(p, 0755)
os.makedirs(p, 0775)
p = os.path.join(policy_path, "USER")
if not os.path.exists(p):
os.makedirs(p, 0755)
os.makedirs(p, 0775)
def create_default_gpo(sysvolpath, dnsdomain, policyguid, policyguid_dc):