Hi I cannot seem to find any information regarding this in the mailing lists . I am testing a UNIX PDC before I implement it to general use in the network . It works fine It would appear with the win 2000 clients. But I essentially have two problems 1. When I have PGP installed on the machine and log in with a roaming profile . It creates a network associates folder that does not get propagated to the server and then will not delete unless I reboot and log in as Admin . then If I log in again the roaming profile creates a user.001 folder and then a user.002 the next time I log in . this Is no good as you can imagine Is there any solution to this apart from not using PGP. 2. I would like the roaming users when they log on to windows 2000 machines to have power user rights , as I notice that other application do not run . Is this possible with samba . I am going to test samba alpha 3.0 in the hope that some of these issues have been resolved . But If this is not possible I would like to know . I have not found a definite answer to either of these issues . Can you please clarify for me when you get a chance . Thanks Karl -------------- next part -------------- HTML attachment scrubbed and removed
> 2. I would like the roaming users when they log on to > windows 2000 machines to have power user rights , as > I notice that other application do not run .On W2K add NT-AUTHORITY group to Administrators group. _____________________________________________________________ Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus
Dragan, In my last reply I forgot to mention that Andrew Bartlett and I reviewed the process for copying a user profile last week. When he gets back from his vacations he will document the process for Samba users. We are considering a Unix tool to facilitate this process. No promises though. - John T. On Mon, 2 Dec 2002, Dragan Krnic wrote:> > 2. I would like the roaming users when they log on to > > windows 2000 machines to have power user rights , as > > I notice that other application do not run . > > On W2K add NT-AUTHORITY group to Administrators group. > > > _____________________________________________________________ > Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. > http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus >-- John H Terpstra Email: jht@samba.org
Good news, John! Profile migration tool is an answered prayer. But this is a slightly different thread. Karl Keogh here would like to give his users more rights because otherwise some apps won't run. By power user he probably means Administrators. So I suggested to join the group of authorized users (in a German locale it's "NT- AUTHORITÄT") to the local Administrator group. -- On Mon, 2 Dec 2002 23:06:31 John H Terpstra wrote:>Dragan, > >In my last reply I forgot to mention that Andrew Bartlett and I reviewed >the process for copying a user profile last week. When he gets back from >his vacations he will document the process for Samba users. We are >considering a Unix tool to facilitate this process. No promises though. > >- John T. > >On Mon, 2 Dec 2002, Dragan Krnic wrote: > >> > 2. I would like the roaming users when they log on to >> > windows 2000 machines to have power user rights , as >> > I notice that other application do not run . >> >> On W2K add NT-AUTHORITY group to Administrators group. >> >> >> _____________________________________________________________ >> Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. >> http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus >> > >-- >John H Terpstra >Email: jht@samba.org >_____________________________________________________________ Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus
Yes, but the group of local administrators. Using a localized version of W2K I'm not sure what the power-user group translates to in German, perhaps the same thing. A trusted environment is prerequisite to letting people administer their own workstations. But, as the saying goes, trust no one. Try adding yourself to whatever groups are available locally and see what happens, consult manuals and especially on-line documents because of ease of searching and build your confidence by learning. My reply was a silver bullet that might shoot back, if you give some nitwit too much powers, but I wrote back primarily because I felt no one else would and I know personally the frustration of ignored postings. Good luck, Karl. Dragan -- On Tue, 3 Dec 2002 09:27:31 Karl Keogh wrote:> >Thanks for your help Sorry to be a pest but >Should I not add them to the power users group ?? >Wouldn't doing what you said make all authenticated users members of the >administrator group ?? >Also Has the PGP issue come to light before ?? > >-----Original Message----- >From: Dragan Krnic [mailto:dkrnic@lycos.com] >Sent: Monday, December 02, 2002 10:32 PM >To: samba@samba.org >Cc: karlk@globogift.com >Subject: Issues with Samba > > >> 2. I would like the roaming users when they log on to >> windows 2000 machines to have power user rights , as >> I notice that other application do not run . > >On W2K add NT-AUTHORITY group to Administrators group. > > >_____________________________________________________________ >Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. >http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus > > >_____________________________________________________________ Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus
Great hint! I only had a few dozens of workstations to visit in the initial phase but when we take Berlin "NTConfig.POL" will be used;-). I'll find more about how to deploy it. Thanks a lot, John. -- On Mon, 2 Dec 2002 23:32:55 John H Terpstra wrote:>On Tue, 3 Dec 2002, Dragan Krnic wrote: > >> Good news, John! Profile migration tool is an answered prayer. >> >> But this is a slightly different thread. Karl Keogh here would like >> to give his users more rights because otherwise some apps won't >> run. By power user he probably means Administrators. So I >> suggested to join the group of authorized users (in a German >> locale it's "NT-AUTHORITÄT") to the local Administrator group. > >This needs to be set either on each workstation individually, by >making the domain user a member of the local administrator group, or >else by creating an NTConfig.POL file using the NT Group Policy >Editor that sets makes the user a member of the local workstation >administrator group. You may have to first create the policy editor >template to do this. You then place this NTCOnfig.POL file in the >root of the "netlogon" share. Then automatically, as the user logs >on, he/she will gain local administrator rights and privilidges. > >- John T. >> -- >> On Mon, 2 Dec 2002 23:06:31 >> John H Terpstra wrote: >> >Dragan, >> > >> >In my last reply I forgot to mention that Andrew Bartlett and I >> >reviewed the process for copying a user profile last week. When >> >he gets back from his vacations he will document the process for >> >Samba users. We are considering a Unix tool to facilitate this >> >process. No promises though. >> > >> >- John T. >> > >> >On Mon, 2 Dec 2002, Dragan Krnic wrote: >> > >> >> > 2. I would like the roaming users when they log on to >> >> > windows 2000 machines to have power user rights , as >> >> > I notice that other application do not run . >> >> >> >> On W2K add NT-AUTHORITY group to Administrators group._____________________________________________________________ Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus