samba - Jul 2002 - User has no privileges to add printer or even change his wallpaper

Hello

I have a question related to Samba + Win2k Workstations.
I have replaced a Win2k server by Samba (2.2.4). Everything was fine: the
users could login and access shares, but they could not connect to
printers shared on another Win2k workstations and even could not change
their wallpapers.

Since I needed to do that work fast, the solution I could find to this
situation was to give to all users admin privileges in their own Win2k 
workstations (it was a small network, so this could be done with no
problems).

Although that worked, I really think there?s another way of solving that
problem, so I ask if someone knows how.

Below is my smb.conf file, if this can help somehow.

Thanks,
Lucas


[global]
    workgroup = WorkgroupName
    netbios name = Server
    server string = Server

    client code page = 850
    character set = ISO8859-1

    admin users = admin
    
    load printers = yes
    nt acl support = no
    
    log file = /var/log/samba/log.%m
    log level = 3
    max log size = 500
    security = user
    smb passwd file = /usr/local/samba/private/smbpasswd
    passwd program = /usr/bin/passwd %u
    encrypt passwords = yes
    unix password sync = yes
    passwd chat debug = yes
    update encrypted = yes
    null passwords = yes
    guest ok = yes

    socket options = TCP_NODELAY SO_RCVBUF=2048 SO_SNDBUF=2048
    hosts allow = 192.168.0. 127.
    interfaces = 192.168.0.0/24
    bind interfaces only = yes

    local master = yes
    os level = 65
    domain master = yes
    preferred master = yes

    domain logons = yes
    wins support = yes
    
    logon home = \\%L\%U
    logon path = \\%L\%U\profile

[netlogon]
   comment = Netlogon Service
   path = /var/samba-logon
   guest ok = yes
   public = yes
   writable = yes

[D]
    comment = Caneta
    path = /mnt/caneta
    available = yes
    browseable = yes
    read only = no
    public = yes
    guest only = no
    guest ok = yes
    writable = yes
    only user = no
    create mask = 777
    directory mask = 777
    delete readonly = yes

You might want to look into ACLs of your W2k worstations..and GPOs..

First off look at the workstation with the printer connected...what are
the permissions for printer access? If Users or at least Authenticated
Users aren't allowed to access it that would explain it...

Second of all...where were your profiles stored on the old W2k server?
Were they roaming/mandatory or were all the profiles stored on local
machines? In
that case: were the users previously Power Users? They belong to the
group
Authenticated users (that goes under the Users group)...

Check the profile paths for users, perhaps they don't have write
permissions
to the profiles..

"Windows 2000 provides three groups whose membership is controlled by
the administrator: Users, Power Users, and Administrators. The group
whose membership is controlled by the operating system or domain is
Authenticated Users. It is the same as the Everyone group, except that
it does not contain anonymous users or guests." and "By default in
Windows 2000, any authenticated user is a member of the Users group."

So I would say to check your permissions/GPOs on your w2k workstations..

Hope I helped a bit,
Amadej.



-----Original Message-----
From: samba-admin@lists.samba.org [mailto:samba-admin@lists.samba.org]
On Behalf Of Lucas Correia Villa Real
Sent: Saturday, July 27, 2002 6:56 AM
To: samba@lists.samba.org
Subject: [Samba] User has no privileges to add printer or even change
his wallpaper

Hello

I have a question related to Samba + Win2k Workstations.
I have replaced a Win2k server by Samba (2.2.4). Everything was fine:
the
users could login and access shares, but they could not connect to
printers shared on another Win2k workstations and even could not change
their wallpapers.

Since I needed to do that work fast, the solution I could find to this
situation was to give to all users admin privileges in their own Win2k 
workstations (it was a small network, so this could be done with no
problems).

Although that worked, I really think there?s another way of solving that
problem, so I ask if someone knows how.

Below is my smb.conf file, if this can help somehow.

Thanks,
Lucas


[global]
    workgroup = WorkgroupName
    netbios name = Server
    server string = Server

    client code page = 850
    character set = ISO8859-1

    admin users = admin
    
    load printers = yes
    nt acl support = no
    
    log file = /var/log/samba/log.%m
    log level = 3
    max log size = 500
    security = user
    smb passwd file = /usr/local/samba/private/smbpasswd
    passwd program = /usr/bin/passwd %u
    encrypt passwords = yes
    unix password sync = yes
    passwd chat debug = yes
    update encrypted = yes
    null passwords = yes
    guest ok = yes

    socket options = TCP_NODELAY SO_RCVBUF=2048 SO_SNDBUF=2048
    hosts allow = 192.168.0. 127.
    interfaces = 192.168.0.0/24
    bind interfaces only = yes

    local master = yes
    os level = 65
    domain master = yes
    preferred master = yes

    domain logons = yes
    wins support = yes
    
    logon home = \\%L\%U
    logon path = \\%L\%U\profile

[netlogon]
   comment = Netlogon Service
   path = /var/samba-logon
   guest ok = yes
   public = yes
   writable = yes

[D]
    comment = Caneta
    path = /mnt/caneta
    available = yes
    browseable = yes
    read only = no
    public = yes
    guest only = no
    guest ok = yes
    writable = yes
    only user = no
    create mask = 777
    directory mask = 777
    delete readonly = yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba