I've just found out that my backups were missing ACL and the restore will not work until this is fixed.
Luckily I have the luxury of checking what the permissions should look like on a running system, e.g:
RESTORED:
# file: samba/sysvol
# owner: root
# group: 3000000
user::rwx
group::rwx
other::---
RUNNING:
# file: samba/sysvol
# owner: root
# group: 3000000
user::rwx
user:root:rwx
group::rwx
group:3000000:rwx
group:3000001:r-x
group:3000002:rwx
group:3000003:r-x
mask::rwx
other::---
default:user::rwx
default:user:root:rwx
default:group::---
default:group:3000000:rwx
default:group:3000001:r-x
default:group:3000002:rwx
default:group:3000003:r-x
default:mask::rwx
default:other::---
There …