Bom dia
Acho que minha situação é um pouco diferente.
Eu por falta de conhecimento removi o compartilhamento da Sysvol no Server 2012. Aí vasculhando o fórum por aqui, consegui fazer com que as estações recebam as políticas de GPO, usando o dcgpofix.
Aí fui fazer um teste: Com usuario adm de dominio fui editar a politica de limite de bloqueio de conta.
E gerou a mensagem: Acesso negado. Falha ao salvar \\"empresa.com"\sysvol\empresa.com\polices\{ID Police}\Machine\Microsoft\Windows NT\SecEdit\Gpttmpl.inf. Certifique-se de que voce tem as permissões corrertas pra esse objeto.
Tentei seguir essa Thread:
https://social.technet.microsoft.com/Forums/pt-BR/38b23cc7-0394-4774-95b6-5cc9d9819a7a/compartilhamento-e-permisses-pasta-sysvol?forum=winsrv2008pt
Travei ao localizar a pasta \Winnt. Dentro da pasta Windows não existe
Segue abaixo, permissoes NTFS padrão da pasta SYSVOL:
%SystemRoot%\Windows\Sysvol
-
Clear the Allow inheritable permissions from parent to propagate to this object check box
-
Administrators: Full Control
-
Authenticated Users: Read, Read & Execute, and List Folder Contents
-
Creator Owner: Nothing selected
-
Server Operators: Read, Read & Execute, and List Folder Contents
-
System: Full Control
%SystemRoot%\Windows\Sysvol\Sysvol
-
Clear the Allow inheritable permissions from parent to propagate to this object check box
%SystemRoot%\Winnt\Sysvol\Sysvol\domain
-
Clear the Allow inheritable permissions from parent to propagate to this object check box
%SystemRoot%\Winnt\Sysvol\Sysvol\domain\Policies
-
Clear the Allow inheritable permissions from parent to propagate to this object check box
-
Administrators: Full Control
-
Authenticated Users: Read, Read & Execute, and List Folder Contents
-
Creator Owner: Nothing selected
-
Group Policy Creator Owners: Read, Read & Execute, List Folder Contents, Modify, and Write
-
Server Operators: Read, Read & Execute, and List Folder Contents
-
System: Full Control
For each file or folder that is located in the %SystemRoot%\Winnt\Sysvol\Sysvol\domain\Policies
-
Check the Allow inheritable permissions from parent to propagate to this object check box
Sysvol share permissions :
-
Administrators: Full Control
-
Authenticated Users: Full Control
-
Everyone: Read
