Hello all: I am in the process of implementing a Samba Primary Domain controller and I have a few questions that I can't yet resolve. First off, how can I set it so that when I log in to a computer on the domain as my username, "ajc", that I gain Administrator rights to that PC? Second, in Windows 2000 Pro I almost always go into Start>Settings>Control Panels>Administrative Tools>Local Security Policy and change some of the default policies. Is there someway that when the computers log into the Domain that they all could gather this information from one file? If so, can someone lead me in the right direction to figuring this out? And third, this is a Windows question that I should probably ask elsewhere but so far I have not found an answer. Suddenly my Win2k Pro computer has begun to boot very slowly. If I check the event log I see that on any given boot, several always changing services will fail to load. Does anyone know have any experience with this? I've tried to do the CD-Repair but that didn't help at all. Thank you for your help, A Cline acline at rimvisions dot com ===================================================================EASY and FREE access to your email anywhere: http://kralweb.com/mail ===================================================================Need cheap webhosting? Visit: http://genialt.no ====================================================================
On Tue, 2002-10-15 at 17:22, Aaron Cline wrote:> Hello all: > > I am in the process of implementing a Samba Primary Domain controller > and I have a few questions that I can't yet resolve. > > First off, how can I set it so that when I log in to a computer on > the domain as my username, "ajc", that I gain Administrator rights > to that PC?make a unix group domadmins (or whatever) add your user ajc to that group use the domain admin group smb.conf parameter domain admin group (G) This parameter is intended as a temporary solution to enable users to be a member of the "Domain Admins" group when a Samba host is acting as a PDC. A complete solution will be provided by a system for mapping Windows NT/2000 groups onto UNIX groups. Please note that this parameter has a somewhat confusing name. It accepts a list of usernames and of group names in standard smb.conf notation. See also domain guest group, domain logons Default: no domain administrators Example: domain admin group = root @wheel> > Second, in Windows 2000 Pro I almost always go into Start>Settings>Control > Panels>Administrative Tools>Local Security Policy and change some > of the default policies. Is there someway that when the computers > log into the Domain that they all could gather this information from > one file? If so, can someone lead me in the right direction to figuring > this out?I don't know for sure - there was something like this for nt4 but I don't know if it works for w2k and xp. I get around this problem by just re-imaging the clients when i make a change to the security policies> And third, this is a Windows question that I should probably ask > elsewhere but so far I have not found an answer. Suddenly my Win2k > Pro computer has begun to boot very slowly. If I check the event > log I see that on any given boot, several always changing services > will fail to load. Does anyone know have any experience with this? > I've tried to do the CD-Repair but that didn't help at all.dunno - don't waste too much time figuring this out - just reinstall.
On Tue, 15 Oct 2002, Aaron Cline wrote:> Hello all: > > I am in the process of implementing a Samba Primary Domain controller > and I have a few questions that I can't yet resolve. > > First off, how can I set it so that when I log in to a computer on > the domain as my username, "ajc", that I gain Administrator rights > to that PC?In smb.conf [globals] admin users = ajc root> > Second, in Windows 2000 Pro I almost always go into Start>Settings>Control > Panels>Administrative Tools>Local Security Policy and change some > of the default policies. Is there someway that when the computers > log into the Domain that they all could gather this information from > one file? If so, can someone lead me in the right direction to figuring > this out?Use the Win2K Resource Kit Group Policy Editor to configure all the setting you need. Then save that as a file called "NTConfig.Pol" and locate this in the root of your Netlogon share. This file gets auto-loaded at every domain logon.> And third, this is a Windows question that I should probably ask > elsewhere but so far I have not found an answer. Suddenly my Win2k > Pro computer has begun to boot very slowly. If I check the event > log I see that on any given boot, several always changing services > will fail to load. Does anyone know have any experience with this? > I've tried to do the CD-Repair but that didn't help at all. > > Thank you for your help, > > A Cline > acline at rimvisions dot com > > > > > > ===================================================================> EASY and FREE access to your email anywhere: http://kralweb.com/mail > ===================================================================> Need cheap webhosting? Visit: http://genialt.no > ===================================================================> > >- John T. -- John H Terpstra Email: jht@samba.org