Marc Berenschot
2002-Sep-15 18:25 UTC
[Samba] XP + SP1 + roaming profiles, working at our site
We also run into the roaming profile problem. Microsoft advised us to do the following: ------ This extra check can be disabled by setting the following Policy setting: Open the Group Policy editor. Browse to: Computer Configuration => Administrative Templates => System => User Profiles The option "Do not check for user ownership of Roaming Profile Folder" can be enabled or disabled. (The default is disabled) Note that if you want to add this policy to the Active Directory you will have to create the GPO from a Windows XP workstation. ------ It works on our site now, so we can both use win2k (SP3) and XP (SP1) with roaming profiles on a Solaris Samba server without winbind. Marc Berenschot.
Can someone help a beleagured (windows ignorant) unix nerd who is forced to support a couple of odd windows machines out? Where do I find this on a windows 2000 professional machine? Alternatively, if this just twiddles some reg key, can someone tell me what to do via regedit to acheive the same thing? Thanks jim On Sun, 15 Sep 2002, Marc Berenschot wrote:> Open the Group Policy editor. Browse to: Computer Configuration => > Administrative Templates => System => User Profiles The option "Do not > check > for user ownership of Roaming Profile Folder" can be enabled or > disabled. > (The default is disabled) > > Note that if you want to add this policy to the Active Directory you > will > have to create the GPO from a Windows XP workstation. > ------ > > It works on our site now, so we can both use win2k (SP3) and XP (SP1) > with roaming profiles on a Solaris Samba server without winbind. > > Marc Berenschot. >
Marc Berenschot
2002-Sep-16 06:50 UTC
[Samba] XP + SP1 + roaming profiles, working at our site
>Can someone help a beleagured (windows ignorant) unix nerd who is >forced >to support a couple of odd windows machines out? Where do I find this >on a windows 2000 professional machine? Alternatively, if this just >twiddles some reg key, can someone tell me what to do via regedit to >acheive the same thing?You do not need this on windows 2000. To get roaming profiles working there you need to add nt acl support = yes to the profile share. This is only for Win XP with SP1, since Microsoft made some changes there (asking for a SID when opening a profile). Marc.>On Sun, 15 Sep 2002, Marc Berenschot wrote: > >> Open the Group Policy editor. Browse to: Computer Configuration => >> Administrative Templates => System => User Profiles The option "Do >> not check for user ownership of Roaming Profile Folder" can be >> enabled or disabled. (The default is disabled) >> >> Note that if you want to add this policy to the Active Directory you >> will have to create the GPO from a Windows XP workstation. >> ------ >> >> It works on our site now, so we can both use win2k (SP3) and XP (SP1) >> with roaming profiles on a Solaris Samba server without winbind. >> >> Marc Berenschot. >>-- Marc Berenschot Email: berensch@cs.utwente.nl UNIX Systeembeheerder Phone: 053 4894615
Bradley W. Langhorst
2002-Sep-16 13:58 UTC
[Samba] XP + SP1 + roaming profiles, working at our site
On Mon, 2002-09-16 at 02:48, Marc Berenschot wrote:> > >Can someone help a beleagured (windows ignorant) unix nerd who is > >forced > >to support a couple of odd windows machines out? Where do I find this > >on a windows 2000 professional machine? Alternatively, if this just > >twiddles some reg key, can someone tell me what to do via regedit to > >acheive the same thing? > > > You do not need this on windows 2000. To get roaming profiles working > there you need to add nt acl support = yes to the profile share. > This is only for Win XP with SP1, since Microsoft made some changes > there (asking for a SID when opening a profile).I think you may have this backwards... If I understand this correctly there are two possibilities Samba domain controller nt acl support must be yes if you are using XPsp1. nt acl support can be yes if you are using XPrelease nt acl support can be yes if you are using win2kSP2 No samba domain controller nt acl support = no for win2ksp2 and XPrelease for XPsp1 you must apply the group policy change to log on. brad
Marc Berenschot
2002-Sep-16 14:14 UTC
[Samba] XP + SP1 + roaming profiles, working at our site
On 16 Sep 2002 09:57:13 -0400 "Bradley W. Langhorst" <brad@langhorst.com> wrote:> On Mon, 2002-09-16 at 02:48, Marc Berenschot wrote: > > > > >Can someone help a beleagured (windows ignorant) unix nerd who is > > >forced > > >to support a couple of odd windows machines out? Where do I find > > >this on a windows 2000 professional machine? Alternatively, if this > > >just twiddles some reg key, can someone tell me what to do via > > >regedit to acheive the same thing? > > > > > > You do not need this on windows 2000. To get roaming profiles > > working there you need to add nt acl support = yes to the profile > > share. This is only for Win XP with SP1, since Microsoft made some > > changes there (asking for a SID when opening a profile). > I think you may have this backwards... > > If I understand this correctly there are two possibilities > Samba domain controller > nt acl support must be yes if you are using XPsp1. > nt acl support can be yes if you are using XPrelease > nt acl support can be yes if you are using win2kSP2 > No samba domain controller > nt acl support = no for win2ksp2 and XPrelease > for XPsp1 you must apply the group policy change to log on.You are right, where I said yes I should have said no... Marc. -- Marc Berenschot Email: berensch@cs.utwente.nl UNIX Systeembeheerder Phone: 053 4894615
Andrew Bartlett
2002-Sep-18 21:55 UTC
[Samba] XP + SP1 + roaming profiles, working at our site
"Bradley W. Langhorst" wrote:> > On Mon, 2002-09-16 at 02:48, Marc Berenschot wrote: > > > > >Can someone help a beleagured (windows ignorant) unix nerd who is > > >forced > > >to support a couple of odd windows machines out? Where do I find this > > >on a windows 2000 professional machine? Alternatively, if this just > > >twiddles some reg key, can someone tell me what to do via regedit to > > >acheive the same thing? > > > > > > You do not need this on windows 2000. To get roaming profiles working > > there you need to add nt acl support = yes to the profile share. > > This is only for Win XP with SP1, since Microsoft made some changes > > there (asking for a SID when opening a profile). > I think you may have this backwards... > > If I understand this correctly there are two possibilities > Samba domain controller > nt acl support must be yes if you are using XPsp1. > nt acl support can be yes if you are using XPrelease > nt acl support can be yes if you are using win2kSP2 > No samba domain controllerIf not using winbind:> nt acl support = no for win2ksp2 and XPrelease > for XPsp1 you must apply the group policy change to log on.If using winbind: nt acl support can be yes for all known versions, no reason to turn it off. Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net