Does anyone know if there is a way to disable roaming profiles, for a particular user, from the server side? I thought of trying to blank the server profile string in their account attributes, but of course that says 'use the default' which will be to do whatever smb.conf says. Will setting it to something nonsensical, like a space, make it think to not have one? I'd rather do it per user since I've got about 4 people that need it set up this way and don't want to have to go set up the other 50 accounts to state profile path. I'd also like to do it server side so that these people can use as many machines as they want and/or rebuild as often as they need and not have to remember to reset to 'local' each time. -- Paul Gienger Office: 701-281-1884 Applied Engineering Inc. Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.com mailto: pgienger@ae-solutions.com
On Sunday 10 October 2004 08:17, Paul Gienger wrote:> Does anyone know if there is a way to disable roaming profiles, for a > particular user, from the server side? > > I thought of trying to blank the server profile string in their account > attributes, but of course that says 'use the default' which will be to > do whatever smb.conf says. Will setting it to something nonsensical, > like a space, make it think to not have one?You will need to set the default to a specified blank. ie: logon path = Then specifically set a logon path for each user for whom you do want a roaming profile. - John T.> > I'd rather do it per user since I've got about 4 people that need it set > up this way and don't want to have to go set up the other 50 accounts to > state profile path. I'd also like to do it server side so that these > people can use as many machines as they want and/or rebuild as often as > they need and not have to remember to reset to 'local' each time. > > -- > Paul Gienger Office: 701-281-1884 > Applied Engineering Inc. > Information Systems Consultant Fax: 701-281-1322 > URL: www.ae-solutions.com mailto: pgienger@ae-solutions.com-- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 Other books in production.
>>That's what I was afraid of.... I guess they'll just have to make sure >>they know how to turn their profiles by hand, otherwise make the profile >>small enough to be sane or deal with the hour long logon. Some people >>just can't realize that an email client isn't a decent file storage medium. >> >> >---- >thankfully, Outlook has a built-in 2G self-destruct feature - perhaps >that is older version, but it was highly educational for those who don't >have time to clean up their inbox/sent mail. > >Too bad (or not ;) ) we don't use Outlook, much. Mozilla products have a slightly different annoyance factor, one that includes the retarded notion of NOT putting your cache somewhere under Local Settings... and then setting a 50MB cache size. Ever tried to copy 50MB of 1-10KB files over the network? It's not fun. -- Paul Gienger Office: 701-281-1884 Applied Engineering Inc. Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.com mailto: pgienger@ae-solutions.com
Dear Paul, We recently set up a mandatory roaming profile for the domain admin in samba and *that* might fit your needs. By renaming the NTUSER.DAT file in the root of the user's profile directory to NTUSER.MAN, changes made to the local profile after logging on from the domain are not copied back up to the 'profiles' folder. It was necessary for us to do this because sloppy admins were saving patches, software, etc. on the desktop of the domain admin account - the desktop is copied up to the profiles directory, and when the domain admin logged on to a machine that hadn't been accessed in a while, it took a VERY VERY LONG time to copy down the extremely large user profile. Irritating for all of us windows admins. Anyway, in your case, I'd delete the roaming profiles of the 4 users you want to disable roaming profiles for, recreate the profiles - with a barebones setup, and then rename NTUSER.DAT to NTUSER.MAN in the profiles folders belonging to those users. HTH, Sam Barasch Computer Systems Support Dept. of Biostatistics Universit of Wisconsin - Madison