Univention Bugzilla – Attachment 6347 Details for Bug 36566
idmap not initialized properly on RODC => sysvol permisions broken in domain