Hi all, I'm here again ith a non-strictly samba related problem, but I hope someone in the list has already faced and perhaps solved it... I've got a 60 clients network (most Windows 200 and XP) organized in a domain. The pdc and bdc run on Fedora 2 + samba 3.0.7-2.FC2 + openldap-2.1.29-1, and everything works fine. To limit the use of internet bandwidth I installed a Windows 2003 server acting as SUS (Software Update Services) server (for those who don't know it... it's something similar to an internal Windows Update server) The problem is I can't configure the clients to point to the new server instead of the official Windows Update servers. If the domain would have been Windows-based I would have done it with a group policy, but I have no possibility to do it with Samba. I've tried to remotely modify the registry keys on the clients, but with no success (the change requires also a local policy change, not just a registry key change, and I don't know how to do it remotely). Has anyone of you guys ever tried a setup like this? Sorry if I'm a little bit OT... Thanks! Bye... Mattia
>Has anyone of you guys ever tried a setup like this?Yes. Use NT policy editor. I have attached the policy file I use for SUS updates. Cheers ------------- Kristyan Osborne - IT Technician Longhill High School 01273 391672 / 304086
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1>>>Has anyone of you guys ever tried a setup like this? >> >> Yes. Use NT policy editor. I have attached the policy file I use for SUS updates.>That's nice, thank you a lot. >The only disadvantage of this approach is that I have to manually walk >to every user's desk and import the adm file on every client... >If it would be possible to do it remotely (or, even better, >automatically at the moment the user first logs into the domain) it >would be a dream... :-) >Does anyone has an idea on how to do that?Use policy editor to create a NTCONFIG.pol file and place it in your netlogon folder. Exact instruction for doing this are in the Samba-Howto PDF. Cheers - ------------- Kristyan Osborne - IT Technician Longhill High School 01273 391672 / 304086 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (MingW32) iD8DBQFBY/HUqrr+KdRYU5gRAguSAJ9wYzjp2Fj1Mr1H2u3JxL4TTPRz0QCeMzwr 1vTYr+gYLvI6pKSM9tkj/mc=bebr -----END PGP SIGNATURE-----
Mattia schrieb:> Hi all, > I'm here again ith a non-strictly samba related problem, but I hope > someone in the list has already faced and perhaps solved it... > I've got a 60 clients network (most Windows 200 and XP) organized in a > domain. The pdc and bdc run on Fedora 2 + samba 3.0.7-2.FC2 + > openldap-2.1.29-1, and everything works fine. > To limit the use of internet bandwidth I installed a Windows 2003 server > acting as SUS (Software Update Services) server (for those who don't > know it... it's something similar to an internal Windows Update server) > The problem is I can't configure the clients to point to the new server > instead of the official Windows Update servers. If the domain would have > been Windows-based I would have done it with a group policy, but I have > no possibility to do it with Samba. > I've tried to remotely modify the registry keys on the clients, but with > no success (the change requires also a local policy change, not just a > registry key change, and I don't know how to do it remotely). > > Has anyone of you guys ever tried a setup like this? > > Sorry if I'm a little bit OT... > Thanks! > > Bye... MattiaHi, you can do this in serveral ways , reg patch, programs, but the best way is to create a ntconfig.pol i run this very nice for years here you get info about many way to do it http://susserver.com/ regards
I use tqcrunas / regedit via the login script. Here's my .reg file for the update Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] "WUServer"="http://serverurlgoeshere" "WUStatusServer"="http://serverurlgoeshere" [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] "NoAutoUpdate"=dword:00000000 "AUOptions"=dword:00000004 "NoAutoRebootWithLoggedOnUsers"=dwoord:00000001 "ScheduledInstallDay"=dword:00000000 "ScheduledInstallTime"=dword:00000006 "UseWUServer"=dword:00000001 "RescheduleWaitTime"=dword:00000001 Mattia wrote:> Hi all, > I'm here again ith a non-strictly samba related problem, but I hope > someone in the list has already faced and perhaps solved it... > I've got a 60 clients network (most Windows 200 and XP) organized in a > domain. The pdc and bdc run on Fedora 2 + samba 3.0.7-2.FC2 + > openldap-2.1.29-1, and everything works fine. > To limit the use of internet bandwidth I installed a Windows 2003 > server acting as SUS (Software Update Services) server (for those who > don't know it... it's something similar to an internal Windows Update > server) > The problem is I can't configure the clients to point to the new > server instead of the official Windows Update servers. If the domain > would have been Windows-based I would have done it with a group > policy, but I have no possibility to do it with Samba. > I've tried to remotely modify the registry keys on the clients, but > with no success (the change requires also a local policy change, not > just a registry key change, and I don't know how to do it remotely). > > Has anyone of you guys ever tried a setup like this? > > Sorry if I'm a little bit OT... > Thanks! > > Bye... Mattia
On Wed, 2004-10-06 at 21:28, Kristyan Osborne wrote:> >Has anyone of you guys ever tried a setup like this? > Yes. Use NT policy editor. I have attached the policy file I use for SUS updates.Which was unfortunately stripped. Was this just the one that I posted to the list a while back? I really should put my collection of these up somewhere... Andrew Bartlett -- Andrew Bartlett abartlet@samba.org Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20041007/23341a44/attachment.bin
>>>Has anyone of you guys ever tried a setup like this? >>> >>> >>Yes. Use NT policy editor. I have attached the policy file I use for SUS updates. >> >> > >Which was unfortunately stripped. Was this just the one that I posted >to the list a while back? > >I really should put my collection of these up somewhere... >Please do :-D -- Paul Gienger Office: 701-281-1884 Applied Engineering Inc. Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.com mailto: pgienger@ae-solutions.com
On Wed, 2004-10-06 at 21:05, Andrew Bartlett wrote:> On Wed, 2004-10-06 at 21:28, Kristyan Osborne wrote: > > >Has anyone of you guys ever tried a setup like this? > > Yes. Use NT policy editor. I have attached the policy file I use for SUS updates. > > Which was unfortunately stripped. Was this just the one that I posted > to the list a while back? > > I really should put my collection of these up somewhere...--- I would love to see them Craig