I apologise for this question not being a samba-question, but I guess some of you encountered this problem before. I have samba set up as a domain master and logon server for 6 win98 boxes and everything works perfectly; i have also set up some policies for the windowzs so users won't mess up the computers and (incredibly) the security on win98 is almost NT-like. The big problem is that when logging on, the win98 allows the users to change the name of the domain they're logging on to. If one does this, the following will happen: the computer times out for about 1 minute, and then windows will start with the default user, so all the policies go down the drain (just like pressing ESC, which otherwise wouldn't work if the domain name stayed the same). So if anybody knows if there's anything to be done about this, please HELP...... and once again sorry for this M$-problem question :-)
Set a local policy on network, used to be a way to require network login. That way if they don't authenticate with samba, they are forced back the the login prompt again until its fixed for proper login. Thanks, Trevor -----Original Message----- From: Ionut Ciocirlan [mailto:ionutciocirlan@xnet.ro] Sent: Friday, May 04, 2001 8:13 AM To: Samba List Subject: Not exactly a samba problem..... I apologise for this question not being a samba-question, but I guess some of you encountered this problem before. I have samba set up as a domain master and logon server for 6 win98 boxes and everything works perfectly; i have also set up some policies for the windowzs so users won't mess up the computers and (incredibly) the security on win98 is almost NT-like. The big problem is that when logging on, the win98 allows the users to change the name of the domain they're logging on to. If one does this, the following will happen: the computer times out for about 1 minute, and then windows will start with the default user, so all the policies go down the drain (just like pressing ESC, which otherwise wouldn't work if the domain name stayed the same). So if anybody knows if there's anything to be done about this, please HELP...... and once again sorry for this M$-problem question :-) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
>(just like pressing ESC, which > otherwise > wouldn't work if the domain name stayed the same).Have you set the parameter "Require validation from network for Windows access" with the Policy Editor?
Thanx guys for the answers... But the unbelievable problem is exactly this. Under the policy for Default Computer I have these settings: Windows 98 Network -> Logon -> Require validation from network for windows access --- which is set; and Windows 98 Network -> Microsoft Client forWindows Networks -> Log on to Windows NT -> Domain Name --- is set to my domain name. Indeed, if the user tries hitting ESC or inserts an invalid username or password, he/she is forced back to the login prompt. BUT, as in win98 the login prompt has a text box for domain name and NOT a combo box (which would seem the normal way to me), if someone entered another domain name instead, the windoze will be just fine with that and after one minute the Windows Logon box will appear..... microsoft products keep amazing me every day..... So if you could further help me with that I'd be SOOO greatful. Thanks, Ionut ----- Original Message ----- From: "Trevor Benson" <Tbenson@associatedbp.com> To: "'Ionut Ciocirlan'" <ionutciocirlan@xnet.ro>; "Samba List" <samba@lists.samba.org> Sent: Friday, May 04, 2001 6:49 PM Subject: RE: Not exactly a samba problem.....> Set a local policy on network, used to be a way to require network login. > That way if they don't authenticate with samba, they are forced back thethe> login prompt again until its fixed for proper login. > > > Thanks, > Trevor----- Original Message ----- From: "McEldowney, Michael" <MMcEldowney@deltaregional.com> To: "'Ionut Ciocirlan'" <ionutciocirlan@xnet.ro>; "Samba List" <samba@lists.samba.org> Sent: Friday, May 04, 2001 7:15 PM Subject: RE: Not exactly a samba problem.....> >(just like pressing ESC, which > > otherwise > > wouldn't work if the domain name stayed the same). > > Have you set the parameter "Require validation from network for Windows > access" with the Policy Editor? >
Sounds like a bug in Win98, come to think of it, I think I remember something like this being reported about Win95 as well. I'll have to look back thru the MS "Knowledge" Base... You might try this as a work around. Change the "Primary Network Logon" in the Network Properties to "Windows Logon". Many downsides to this, including password management and no logon scripts. If you have the ability, you could write a program that monitors the window list and watches for the logon box, then programmatically change the domain textbox to a "read only" class, and run it as a service... Boy, this is getting WAY off topic. Email me directly if you need help with the last suggestion... mmceldowney@deltaregional.com> -----Original Message----- > From: Ionut Ciocirlan [mailto:ionutciocirlan@xnet.ro] > Sent: Friday, May 04, 2001 12:26 PM > To: Samba List > Subject: Re: Not exactly a samba problem..... > > > Thanx guys for the answers... > > But the unbelievable problem is exactly this. Under the > policy for Default > Computer I have these settings: > Windows 98 Network -> Logon -> Require validation from > network for windows > access --- which is set; > and > Windows 98 Network -> Microsoft Client forWindows Networks -> > Log on to > Windows NT -> Domain Name --- is set to my domain name. > > Indeed, if the user tries hitting ESC or inserts an invalid > username or > password, he/she is forced back to the login prompt. BUT, as > in win98 the > login prompt has a text box for domain name and NOT a combo > box (which would > seem the normal way to me), if someone entered another domain > name instead, > the windoze will be just fine with that and after one minute > the Windows > Logon box will appear..... microsoft products keep amazing me > every day..... > So if you could further help me with that I'd be SOOO greatful. > > Thanks, > Ionut > > ----- Original Message ----- > From: "Trevor Benson" <Tbenson@associatedbp.com> > To: "'Ionut Ciocirlan'" <ionutciocirlan@xnet.ro>; "Samba List" > <samba@lists.samba.org> > Sent: Friday, May 04, 2001 6:49 PM > Subject: RE: Not exactly a samba problem..... > > > > Set a local policy on network, used to be a way to require > network login. > > That way if they don't authenticate with samba, they are > forced back the > the > > login prompt again until its fixed for proper login. > > > > > > Thanks, > > Trevor > > ----- Original Message ----- > From: "McEldowney, Michael" <MMcEldowney@deltaregional.com> > To: "'Ionut Ciocirlan'" <ionutciocirlan@xnet.ro>; "Samba List" > <samba@lists.samba.org> > Sent: Friday, May 04, 2001 7:15 PM > Subject: RE: Not exactly a samba problem..... > > > > >(just like pressing ESC, which > > > otherwise > > > wouldn't work if the domain name stayed the same). > > > > Have you set the parameter "Require validation from network > for Windows > > access" with the Policy Editor? > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >