u/tmontney

From time to time, I get this error when modifying connection security rules in my GPOs. The error text is either "Access is denied" or "File not found". When you dismiss the message, the dialog closes like it saved. When opened, your changes appear to be successful. If you make a slight change and save again, no error.

That's been my experience over the past year and the actual GPOs seemed to deploy. A week ago, this was not the case, the new changes simply would not reflect. That was, until I toggled the changes back and forth and not get an error. Then, it applied.

I almost exclusively make changes via the MMC snap-in remotely. I've noticed it takes a bit longer to apply changes than if I did it directly on a DC. I've observed this while in the office and over VPN. I tried to procmon it. Changes take even longer and I've never reproduced it when running procmon.

Has anyone seen anything like this? dcdiag and repadmin don't report any issues, and there are no other observed problems. Running on Server 2019.

Initially, I manually made my chroot environment. Things seemed to be going well until clamd/freshclam failed to start, due to failing to find .so files.

Then I thought that it would be a bit of pain to keep this updated, and why i couldnt get pkg_add to work. Came across this: ​https://unix.stackexchange.com/questions/730438/how-to-install-packages-in-chroot-when-chroot-is-launched-with-doas

Makes a lot more sense to just unpack the sets. (A bit heavier but I don't mind.) Unfortunately, ldconfig fails (with pledge throwing an error). pkg_add works but I see diff throwing similar pledge errors. And, of course, clamd/freshclam fail with the same missing libraries.

So, what is the proper way of setting up a new chroot?​