## find /var/lib/samba/sysvol/s3domain.blubb -print -exec samba-tool ntacl get "{}" --as-sddl \;  -exec getfacl {} \;

/var/lib/samba/sysvol/s3domain.blubb
O:LAG:BAD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;SY)(A;;0x001200a9;;;SO)(A;;0x001f01ff;;;BA)(A;;0x001f01ff;;;BA)(A;;0x001f01ff;;;LA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb
# owner: Administrator
# group: Administrators
user::rwx
user:Administrator:rwx
group::rwx
group:Administrators:rwx
group:System\040Operators:r-x
group:Authenticated\040Users:r-x
group:3000000:rwx
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x

/var/lib/samba/sysvol/s3domain.blubb/Policies
O:LAG:BAD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;SY)(A;;0x001f01ff;;;PA)(A;;0x001200a9;;;SO)(A;;0x001f01ff;;;BA)(A;;0x001f01ff;;;BA)(A;;0x001f01ff;;;LA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies
# owner: Administrator
# group: Administrators
user::rwx
user:Administrator:rwx
group::rwx
group:Administrators:rwx
group:System\040Operators:r-x
group:Authenticated\040Users:r-x
group:Group\040Policy\040Creator\040Owners:rwx
group:3000000:rwx
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x

/var/lib/samba/sysvol/s3domain.blubb/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}
O:DAG:DUD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;DA)(A;;0x001200a9;;;ED)(A;;0x001f01ff;;;SY)(A;;0x001f01ff;;;EA)(A;;0x001f01ff;;;DA)(A;;0x001f01ff;;;DA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}
# owner: 5000
# group: Domain\040Users
user::rwx
user:5000:rwx
group::---
group:Domain\040Admins:rwx
group:Enterprise\040Admins:rwx
group:Authenticated\040Users:r-x
group:3000000:rwx
group:3000010:r-x
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x

/var/lib/samba/sysvol/s3domain.blubb/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}/USER
O:DAG:DUD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;DA)(A;;0x001200a9;;;ED)(A;;0x001f01ff;;;SY)(A;;0x001f01ff;;;EA)(A;;0x001f01ff;;;DA)(A;;0x001f01ff;;;DA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}/USER
# owner: 5000
# group: Domain\040Users
user::rwx
user:5000:rwx
group::---
group:Domain\040Admins:rwx
group:Enterprise\040Admins:rwx
group:Authenticated\040Users:r-x
group:3000000:rwx
group:3000010:r-x
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x

/var/lib/samba/sysvol/s3domain.blubb/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}/MACHINE
O:DAG:DUD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;DA)(A;;0x001200a9;;;ED)(A;;0x001f01ff;;;SY)(A;;0x001f01ff;;;EA)(A;;0x001f01ff;;;DA)(A;;0x001f01ff;;;DA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}/MACHINE
# owner: 5000
# group: Domain\040Users
user::rwx
user:5000:rwx
group::---
group:Domain\040Admins:rwx
group:Enterprise\040Admins:rwx
group:Authenticated\040Users:r-x
group:3000000:rwx
group:3000010:r-x
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x

/var/lib/samba/sysvol/s3domain.blubb/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}/GPT.INI
O:DAG:DUD:P(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED)S:AI(OU;CIIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}/GPT.INI
# owner: 5000
# group: Domain\040Users
user::rwx
user:5000:rwx
group::---
group:Domain\040Admins:rwx
group:Enterprise\040Admins:rwx
group:Authenticated\040Users:r-x
group:3000000:rwx
group:3000010:r-x
mask::rwx
other::---

/var/lib/samba/sysvol/s3domain.blubb/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}
O:DAG:DUD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;DA)(A;;0x001200a9;;;ED)(A;;0x001f01ff;;;SY)(A;;0x001f01ff;;;EA)(A;;0x001f01ff;;;DA)(A;;0x001f01ff;;;DA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}
# owner: 5000
# group: Domain\040Users
user::rwx
user:5000:rwx
group::---
group:Domain\040Admins:rwx
group:Enterprise\040Admins:rwx
group:Authenticated\040Users:r-x
group:3000000:rwx
group:3000010:r-x
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x

/var/lib/samba/sysvol/s3domain.blubb/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/USER
O:DAG:DUD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;DA)(A;;0x001200a9;;;ED)(A;;0x001f01ff;;;SY)(A;;0x001f01ff;;;EA)(A;;0x001f01ff;;;DA)(A;;0x001f01ff;;;DA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/USER
# owner: 5000
# group: Domain\040Users
user::rwx
user:5000:rwx
group::---
group:Domain\040Admins:rwx
group:Enterprise\040Admins:rwx
group:Authenticated\040Users:r-x
group:3000000:rwx
group:3000010:r-x
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x

/var/lib/samba/sysvol/s3domain.blubb/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/MACHINE
O:DAG:DUD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;DA)(A;;0x001200a9;;;ED)(A;;0x001f01ff;;;SY)(A;;0x001f01ff;;;EA)(A;;0x001f01ff;;;DA)(A;;0x001f01ff;;;DA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/MACHINE
# owner: 5000
# group: Domain\040Users
user::rwx
user:5000:rwx
group::---
group:Domain\040Admins:rwx
group:Enterprise\040Admins:rwx
group:Authenticated\040Users:r-x
group:3000000:rwx
group:3000010:r-x
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x

/var/lib/samba/sysvol/s3domain.blubb/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/GPT.INI
O:DAG:DUD:P(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED)S:AI(OU;CIIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/GPT.INI
# owner: 5000
# group: Domain\040Users
user::rwx
user:5000:rwx
group::---
group:Domain\040Admins:rwx
group:Enterprise\040Admins:rwx
group:Authenticated\040Users:r-x
group:3000000:rwx
group:3000010:r-x
mask::rwx
other::---

/var/lib/samba/sysvol/s3domain.blubb/scripts
O:LAG:BAD:(A;OICI;0x001200a9;;;AU)(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;SY)(A;;0x001200a9;;;SO)(A;;0x001f01ff;;;BA)(A;;0x001f01ff;;;BA)(A;;0x001f01ff;;;LA)(A;;WO;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)
# file: var/lib/samba/sysvol/s3domain.blubb/scripts
# owner: Administrator
# group: Administrators
user::rwx
user:Administrator:rwx
group::rwx
group:Administrators:rwx
group:System\040Operators:r-x
group:Authenticated\040Users:r-x
group:3000000:rwx
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Authenticated\040Users:r-x
default:mask::r-x
default:other::r-x