[Samba] WINXP Profiles

Peter Krijgsman
Wed, 23 Jul 2003 18:44:13 -0000

I have a problem with samba 2.2.7a which is configured as a PDC for two
Windows XP Profesional workstations.
I'am working with roaming profiles for the winxp machines.
My problem is, when I reboot a winxp machine my roaming profile becomes
a local profile. When I don't reboot the winxp machine roaming stays
roaming.

This is my smb.conf configuration.
The linux machine is a ConnecTUX machine.

[global]
   netbios name = araneus
   use client driver = yes
   delete readonly = yes
   server string = araneus
   nt acl support = yes
   workgroup = peetionline.nl
   encrypt passwords = yes
   guest account = nobody
   keep alive = 30
   os level = 99
   kernel oplocks = no
   security = user
   printing = lprng
   printcap name = /etc/printcap
   load printers = yes
   socket options = TCP_NODELAY
   map to guest = Bad User
   map hidden = yes
   map system = yes
   create mode = 771
   wins support = yes
   unix password sync = yes
   min passwd length = 0
   dos filemode = no
   oplocks = yes
   add user script = /usr/local/araneus/scripts/addmachine %u
   passwd chat = *password* %n\n *Re-enter* %n\n *changed*
   passwd program = /usr/bin/passwd %u
   domain admin group = peter
profile acls = yes
csc policy = disable

   domain logons = yes
   domain master = yes
 local master = no
   preferred master = yes

   logon script = logon.bat

   interfaces = 10.0.0.140/255.0.0.0

[qmailq]
   path = /md0/home/3/home
   comment = qmailq
   browseable = yes
   read only = no
   public = no
   valid users = qmailq peter
   force user = qmailq

[peter]
   path = /md0/home/4/home
   comment = Peter Krijgsman
   browseable = yes
   read only = no
   public = no
   valid users = peter peter
   force user = peter


[printers]
   comment = All Printers
   browseable = no
   printable = yes
   public = no
   read only = yes
   create mode = 0700
   directory = /md0/tmp

[Sophos]
   comment = Central Directory Sophos
   browseable = yes
   public = no
   create mode = 771
   directory mode = 771
writeable = yes
   directory = /md0/share/1
[Algemeen]
   comment = Algemene User Directory
   browseable = yes
   public = no
   create mode = 771
   directory mode = 771
writeable = yes
   directory = /md0/share/2

[TeamLinkpeter]
   comment = Outlook
   browseable = yes
   public = no
   create mode = 771
   directory mode = 771
writeable = yes
   directory = /md0/share/3
[www]
   comment = De www pagina
   browseable = yes
   public = no
   writeable = yes
   create mode = 775
   directory mode = 775
   valid users = root peter
   force user = root
   directory = /md0/Webpage


[Admin]
   comment = Admin
   browseable = yes
   public = no
   writeable = yes
   create mode = 771
   directory mode = 771
   valid users = root peter
   force user = root
   directory = /md0/Beheer

[Beheer]
   comment = Beheer
   browseable = no
   public = no
   writeable = yes
   create mode = 771
   directory mode = 771
   valid users = root peter
   force user = root
   directory = /md0/Beheer

[cdrom1]
   comment    browseable = yes
   public = no
   create mode = 771
   directory mode = 771
writeable = yes
   directory = /cdrom/0

[netlogon]
   browseable = no
   public = no
   writeable = yes
   path = %H/netlogon
[common]
   public = yes
   browseable = no
   writeable = no
   path = /netlogon/
include = /etc/araneus/targets/150samba/www-smb.conf

[McAfee]
   comment = McAfee data
   browseable = yes
   public = no
   create mode = 770
   directory mode = 770
   writeable = no
   directory = /md0/Beheer/McAfee
   map hidden = no

In the windows registry I did:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\parameter
s]
"RequireSignOrSeal"=dword:00000000

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Compatible
RUPSecurity to have the DWORD value of 1

What can possibly go wrong?

Peter Krijgsman