Jason,
> So far, i've been able to successfully add users and machines to the
PDC
> with out a problem. However, I have a question in regards to certain
Groups.
> Specifically, if I wanted to make sure all of the users I add to the Samba
> PDC are part of the "Power Users" group that Windows 2000 comes
with by
> default, how would I specify that? Also, if I had a couple of users that I
> need to make sure are part of the "Administrators" group, I would
imagine,
> I would need to set them up the same way as I do with the "Power
Users"
> group...
>
There is an "Administrator" group supported in the version of Samba
that you are using. This group setting is created in the smb.conf file
and can point to a UNIX group or to individual users.
As far as I know, there has yet to be a method to create power users
with anything other then local policies. Personally, I searched high and
low for a method to do so, in order to facilitate some functionality on
the Windows workstations.
In the end, I had to alter the local security policies to allow those
tasks to be performed by Authenticated Domain Users. Which, while taking
a little longer to configure, is actually a little less messy
considering all of the abilities conferred to Power Users. (Which
weren't needed by the regular users.)
> I'm wondering if I need to use NT 4.0 disk to install a policy editor
of
> some sort?
I dunno about this one.
> I've read that their are new features coming out with Samba 3.0 that
will
> help with this, but for the time being, what would be the best way to
> manage and setup my users accordingly?
>
Hopefully, Samba 3.0 will provide excellent Windows 2000 Domain
Controls, just as the current production version of Samba does with
Windows NT 4.0 Domain Controls.
For the time being, I have found that Windows 2000 Local Security
policies work fine. If you aren't using Windows 2000 across all your
workstations, then I am unsure of how to further assist you with that.
Regards,
Robert Adkins
IT Manager/Buyer
586-254-5800