samba - Oct 2019 - how to automatically create the home directory

> > There's fourth way, which is what is normally used in a
Windows-only
> environment, but works just the same with home folders on a
> > samba DM fileserver.   The method relies on creating the user with
RSAT
> tools using ADUC.
> >
> > On the Profile tab, set a drive letter, eg H: to the path to the home
> folder, specifying the user's name as %username% for example:
> >
> > Connect H: to \fileserver.samdom.example.com\users\%username%
> >
> > (You can use the short name for the domain or as here the fqdn.)
>  Providing the Windows ACLs have been set up correctly on the
> > share the user's home directory is created automatically.   No
script is
> needed.
>
> Yes, that is another way, but, as far as I am aware, it only works on
> Windows ;-)
>
> If it does work on a Unix Domain member, then this is something I have
> missed.
>
Yes, the method above does create the home directory on a Unix DM, even
without using a PAM module.

--
Mason

On 10/10/2019 13:02, Mason Schmitt wrote:
>
>     > There's fourth way, which is what is normally used in a
>     Windows-only environment, but works just the same with home
>     folders on a
>     > samba DM fileserver.? ?The method relies on creating the user
>     with RSAT tools using ADUC.
>     >
>     > On the Profile tab, set a drive letter, eg H: to the path to the
>     home folder, specifying the user's name as %username% for example:
>     >
>     > Connect H: to \fileserver.samdom.example.com
>     <http://fileserver.samdom.example.com>\users\%username%
>     >
>     > (You can use the short name for the domain or as here the
>     fqdn.)? ? ?Providing the Windows ACLs have been set up correctly
>     on the
>     > share the user's home directory is created automatically.? ?No
>     script is needed.
>
>
>     Yes, that is another way, but, as far as I am aware, it only works on
>     Windows ;-)
>
>     If it does work on a Unix Domain member, then this is something I
>     have
>     missed.
>
>
> Yes, the method above does create the home directory on a Unix DM, 
> even without using a PAM module.
Just tried on a W10 PC and it doesn't work for me, I just get:

The \\raspberrypi.samdom.example.com\users\rowland home folder was not 
created because the path was not found. This could be caused by listing 
non-existent folders or by not finding the server or share. The user 
account has been updated with the new home folder value but you must 
create the folder manually.

Windows can find the computer and the homes share, so, unless I am 
missing something, this doesn't work for me.

Rowland

> -----Original Message-----
> From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland
penny via samba
> Sent: 10 October 2019 13:33
> To: sambalist
> Subject: Re: [Samba] how to automatically create the home directory
> 
> On 10/10/2019 13:02, Mason Schmitt wrote:
> >
> >     > There's fourth way, which is what is normally used in a
> >     Windows-only environment, but works just the same with home
> >     folders on a
> >     > samba DM fileserver.? ?The method relies on creating the user
> >     with RSAT tools using ADUC.
> >     >
> >     > On the Profile tab, set a drive letter, eg H: to the path to
the
> >     home folder, specifying the user's name as %username% for
example:
> >     >
> >     > Connect H: to \fileserver.samdom.example.com
> >     <http://fileserver.samdom.example.com>\users\%username%
> >     >
> >     > (You can use the short name for the domain or as here the
> >     fqdn.)? ? ?Providing the Windows ACLs have been set up correctly
> >     on the
> >     > share the user's home directory is created
automatically.? ?No
> >     script is needed.
> >
> >
> >     Yes, that is another way, but, as far as I am aware, it only works
on
> >     Windows ;-)
> >
> >     If it does work on a Unix Domain member, then this is something I
> >     have
> >     missed.
> >
> >
> > Yes, the method above does create the home directory on a Unix DM,
> > even without using a PAM module.
> 
> Just tried on a W10 PC and it doesn't work for me, I just get:
> 
> The \\raspberrypi.samdom.example.com\users\rowland home folder was not
> created because the path was not found. This could be caused by listing
> non-existent folders or by not finding the server or share. The user
> account has been updated with the new home folder value but you must
> create the folder manually.
> 
> Windows can find the computer and the homes share, so, unless I am
> missing something, this doesn't work for me.
> 
> Rowland
It does work, but you need the acl's (NTFS permission) to include
Authenticated Users, which the samba WiIi doesn't specify.   Take a look
here:
https://blogs.technet.microsoft.com/askds/2008/06/30/automatic-creation-of-user-folders-for-home-roaming-profile-and-redirected-folders/

Can't believe I've found something Rowland doesn't know ;-)

Roy

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roy 
> Eastwood via samba
> Verzonden: donderdag 10 oktober 2019 15:49
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] how to automatically create the home directory
> 
> > -----Original Message-----
> > From: samba [mailto:samba-bounces at lists.samba.org] On 
> Behalf Of Rowland penny via samba
> > Sent: 10 October 2019 13:33
> > To: sambalist
> > Subject: Re: [Samba] how to automatically create the home directory
> > 
> > On 10/10/2019 13:02, Mason Schmitt wrote:
> > >
> > >     > There's fourth way, which is what is normally used
in a
> > >     Windows-only environment, but works just the same with home
> > >     folders on a
> > >     > samba DM fileserver.??? ???The method relies on 
> creating the user
> > >     with RSAT tools using ADUC.
> > >     >
> > >     > On the Profile tab, set a drive letter, eg H: to 
> the path to the
> > >     home folder, specifying the user's name as %username% 
> for example:
> > >     >
> > >     > Connect H: to \fileserver.samdom.example.com
> > >     <http://fileserver.samdom.example.com>\users\%username%
> > >     >
> > >     > (You can use the short name for the domain or as here
the
> > >     fqdn.)??? ??? ???Providing the Windows ACLs have been 
> set up correctly
> > >     on the
> > >     > share the user's home directory is created 
> automatically.??? ???No
> > >     script is needed.
> > >
> > >
> > >     Yes, that is another way, but, as far as I am aware, 
> it only works on
> > >     Windows ;-)
> > >
> > >     If it does work on a Unix Domain member, then this is 
> something I
> > >     have
> > >     missed.
> > >
> > >
> > > Yes, the method above does create the home directory on a Unix
DM,
> > > even without using a PAM module.
> > 
> > Just tried on a W10 PC and it doesn't work for me, I just get:
> > 
> > The \\raspberrypi.samdom.example.com\users\rowland home 
> folder was not
> > created because the path was not found. This could be 
> caused by listing
> > non-existent folders or by not finding the server or share. The user
> > account has been updated with the new home folder value but you must
> > create the folder manually.
> > 
> > Windows can find the computer and the homes share, so, unless I am
> > missing something, this doesn't work for me.
> > 
> > Rowland
> 
> It does work, but you need the acl's (NTFS permission) to 
> include Authenticated Users, which the samba WiIi doesn't 
> specify.   Take a look here:
> https://blogs.technet.microsoft.com/askds/2008/06/30/automatic
> -creation-of-user-folders-for-home-roaming-profile-and-redirec
> ted-folders/
> 
> Can't believe I've found something Rowland doesn't know ;-)
Only ..  well, not to spoil you enthousiasm, but that is already on the wiki ;-)

Your link, is to old for current windows version and might give problems. 
The updated version : 
https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/folder-redirection-rup-overview

But thank you for thinking with us.  :-) 


> 
> Roy
> 
Louis

>
> Just tried on a W10 PC and it doesn't work for me, I just get:
>
> The \\raspberrypi.samdom.example.com\users\rowland home folder was not
> created because the path was not found. This could be caused by listing
> non-existent folders or by not finding the server or share. The user
> account has been updated with the new home folder value but you must
> create the folder manually.
>
> Windows can find the computer and the homes share, so, unless I am
> missing something, this doesn't work for me.
>
I currently have 5 different offices (around 50 users) in which I've used
this method of creating home folders.  However, it doesn't appear that the
folder creation is related to the user's first successful connection to the
file server, because as soon as I add the home folder path to the account
profile in ADUC, I immediately see the user's home directory created on the
Samba file server.  I don't yet understand the mechanism and haven't had
the time to delve deeper to figure it out, but I do know that it works and
works very reliably.

If it would be helpful for me to post my smb.conf files (DC and file
server), just let me know.

-- 

Mason