samba - May 1999 - Advice needed for samba for school use (SAMBA digest 2083)

> Date: Fri, 07 May 1999 18:36:52 +0000
> From: Michael Anderson <mka@gto1.telmex.net.mx>
> To: samba@samba.org
> Subject: Advice needed for samba for school use
> Message-ID: <37333257.7850176F@gto1.telmex.net.mx>
> 
> Hi:
> 
> I'm setting-up samba 2.0.0 on linux 2.2.1 as a file/print server
> for a group of 24 Win98 machines in a mixed-age (K-12) school
> lab in Mexico. There are approx. 200 students and every hour the users
> change. The users do not often use the same machine they last used.
> 
> I need to automate the process as much as possible; I'm sure
> this is being done elswhere and I hate to reinvent the wheel.
> What I need to happen is this:
> 
> 1. All login info. and user profiles stored on the samba server
> and only on the samba server. If local copies are made, over time
> every machine will have password and profile information (likely
> out-of-date) for every student. I have the profiles being stored
> correctly on the samba server, how can I eliminate the copies
> on the client machines?
It's possible only via network policy on WindowsNT.
> 2. Each user should connect automatically to his home directory
> upon login at the Win98 machine, and disconnect automatically
> upon logout. The user's home directory should become the current
> working directory for the user, so that, by default, all user
> files are kept there. I've tried putting "net use z: /HOME"
in
> the %U.bat for each user, but it fails because "netlogon" is
> always mounted on z:.
You can try this:
Net Use Y: \\Server\Homes

in smb.conf:
[homes]
  path = /usr/users/%S
  comment = Home directory of user %S
  guest ok = no
  read only = no
  browseable = no
  create mode = 0700
> 3. Users should not be able to see (browse) the directories of
> any other user.
in smb.conf:
[global]
  browseable = no
and [homes] section as above
> 4. The Win98 logon screen fields should always be blank (not
> contain the name of the last user) for new logins.
In PolEdit:
Local Computer - Windows 98 Network - Logon - Dont show last user on logon
> 5. Users should not be able to "share" their home directory
> across the network.
> 
> 6. Does a tool exist for batch entry of login/passwords? I'm
> not using password encryption.
If you want automatic logon to Windows, you can use TweakUI.

Best regards
	Ludek Babor			E-Mail: Babor@Glavunion.cz
	operation manager		E-Mail: Ludek.Babor@cz.glaverbel.com
	Glaverbel Czech, a.s., Teplice	Tel: +420-417-503085 (+420-602-388003)
	Sklarska 450			Fax: +420-417-508085
	416 74 Teplice			FIDO: 2:423/74.13

	PGP key available from PGP key servers (http://www.pgp.net/pgpnet)

	I use MIME ISO-8859-2 friendly software.