samba - Jul 2005 - W2K Workstation not reading NTConfig.pol

I have recently set up an small SAMBA network(just my
server and a W2K SP4 Workstation). My Server is acting
as a PDC. Everything seems to work flawlessly, users,
roaming profiles, netlogon script, etc... But I cannot
make this machine to read my NTConfig.pol file.

I have it at my NETLOGON share [/srv/netlogon] with
rwxr-xr-x permissions. I have tried with different
filenames (NTConfig.POL, ntconfig.pol, etc...) but
none seems to work.

I have tried to setup ntconfig.pol with poledit to
just one user (root) and one machine("ibm") or to
default user and default machine. but nothing changes.

Any ideas?


My server is a DELL POWEREDGE SC1420 running CENTOS
4.1 x86-64. The client is an IBM Aptiva running W2K
SP4.

Thanks, and excuse my poor English.


	
	
		
______________________________________________ 
Renovamos el Correo Yahoo! 
Nuevos servicios, m?s seguridad 
http://correo.yahoo.es

Tirant Lo Blanc wrote:
>I have recently set up an small SAMBA network(just my
>server and a W2K SP4 Workstation). My Server is acting
>as a PDC. Everything seems to work flawlessly, users,
>roaming profiles, netlogon script, etc... But I cannot
>make this machine to read my NTConfig.pol file.
>
>I have it at my NETLOGON share [/srv/netlogon] with
>rwxr-xr-x permissions. I have tried with different
>filenames (NTConfig.POL, ntconfig.pol, etc...) but
>none seems to work.
>
>  
>
what does your share definition look like in smb.conf?  Maybe you do not 
have the correct owner/group assigned? 
>I have tried to setup ntconfig.pol with poledit to
>just one user (root) and one machine("ibm") or to
>default user and default machine. but nothing changes.
>
>Any ideas?
>
>
>My server is a DELL POWEREDGE SC1420 running CENTOS
>4.1 x86-64. The client is an IBM Aptiva running W2K
>SP4.
>
>Thanks, and excuse my poor English.
>
>
>	
>	
>		
>______________________________________________ 
>Renovamos el Correo Yahoo! 
>Nuevos servicios, m?s seguridad 
>http://correo.yahoo.es
>  
>
-- 
Matt Lung

Midwest Tool & Die, Corp.

> I have recently set up an small SAMBA network(just my
> server and a W2K SP4 Workstation). My Server is acting
> as a PDC. Everything seems to work flawlessly, users,
> roaming profiles, netlogon script, etc... But I cannot
> make this machine to read my NTConfig.pol file.
>
> I have it at my NETLOGON share [/srv/netlogon] with
> rwxr-xr-x permissions. I have tried with different
> filenames (NTConfig.POL, ntconfig.pol, etc...) but
> none seems to work.
just few ideas:

1) try turn on audit on that share (audit is special module for samba,
it does not have all the features Windows audit has, but samba will log
read events), audit is described very well in Samba Official Howto

2) look at "Settings --> Control Panel --> Administration -->
Events"
on a workstation (if You are lucky, You can try to find checked/debug
build of userenv.dll, which handles policies and profiles. I was never 
lucky)
>
> I have tried to setup ntconfig.pol with poledit to
> just one user (root) and one machine("ibm") or to
> default user and default machine. but nothing changes.
>
> Any ideas?
>
>
> My server is a DELL POWEREDGE SC1420 running CENTOS
> 4.1 x86-64. The client is an IBM Aptiva running W2K
> SP4.
>
> Thanks, and excuse my poor English.
>
>
>
>
>
> ______________________________________________
> Renovamos el Correo Yahoo!
> Nuevos servicios, m?s seguridad
> http://correo.yahoo.es
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>

You must make sure that, if path directive in the share is, 
/srv/netlogon, both directories (or _any_directory_ in the way to 
NTconfig.POL) have the 'x' bit on its permissions.

For example (and not complete :)

/srv $ ls -ld netlogon

rwxrwx--- owner group 2048 netlogon

will never let you read anything in Samba if your group is not 'group'. 
Because the position bit (execution for files, position/placement for 
directories) is not set and Samba needs it.

If instead of rwxrwx--- you, at least, have

rwx--x--x

Samba will let you read the NTconfig.POL like it or not :) We had tons 
of incidencies regarding our user profiles and most of the time it was 
due to it. Same applies to any other file or directory, like... [homes]!