Не могу обновить компьютерную политику из samba DC

Я пытаюсь отправить сертификат CA своим клиентам, но их групповая политика не обновляется. Когда я пробую gpupdate / force , я получаю:

Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file
\\[domain]\sysvol\[domain]\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini
from a domain controller and was not successful. Group Policy settings
may not be applied until this event is resolved. This issue may be transient and
could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy update has completed successfully.

To diagnose the failure, review the event log or run GPRESULT /H GPReport.html
from the command line to access information about Group Policy results.

Я могу получить доступ к \\ [домен] \ sysvol \ [домен] \ Policies \ {31B2F340-016D-11D2-945F-00C04FB984F9} \ gpt.ini в проводнике файлов без проблем.

Как это исправить?