similar to: Do group policies work ?

We want to build a Debian's unstable samba 3.0.0beta2-1 as PDC with plenty of Windows 2K clients. Joining the domain, Domain Logons, Roaming Profiles, Domain Groups, are Ok. As we thought that Samba 3 cannot handle Win2K's GPOs (isn't it?), we tried NT4 style Group Policies to restrict a bit users posibilities (as we have students as users). Our opinion is that Mandatory Profiles

Nick Pappin wrote: > Can someone clarify Samba's abilities/limitations in regards to running > Samba as a PDC with Windows XP user/machine policies (Group Policy/NT > Policy... whatever kind is possible). > > A couple specifics that would be helpful to touch on: > > - Can I apply different settings to certain groups of users/computers? If > so will they still

Hello all, I've been trying to figure out what the best way of doing the group policy thing is. We are running samba 3 on slackware 9 with winxp clients. We are a school. i'm unclear on how much AD is actually supported... OU GPO all that. so i decided to go the "administrative template" way (used to be .pol files) I'm thinking of having the students run off of a

I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script

Hello everyone, Not really a Samba problem, but I hope someone can help me : I am doing some tests for integrating XP clients on Samba 3.02 with LDAP backend. I have tried this on a test machine on which I have applied local policies withthe gpedit.msc console (ie : Delete the roaming profiles or hide the logon scripts...) and this work perfectly. Now I'd like to do the same on other

Ok, I'm going kinda nuts... I have a samba 3 + openldap domain, which works great for authentication, etc. I am trying to use the NTConfig.POL to enforce policies on a mix of 98/win2k and XP boxes. This is a K12 environment, so I need very restrictive policies for students, less so for teachers and staff. What seems to be happening, at least with the XP clients is that it gets the

> -----Original Message----- > On Mon, 29 Dec 2003, [ISO-8859-1] ?ncor Gonz?lez Sosa wrote: > > With Samba you can do only what you can do with NT4 using the > NTConfig.POL file. > > > You can copy the files Win2K creates in > c:\WINNT\SYSVOL\sysvol\domainname\profiles to a share called > "SYSVOL" under the path: >

I was told that this mailing list might be a good place to get some answers that another one I'm on couldn't answer. I am using Samba to serve a small Christian school in PA, and we went for it mostly because of the cost - how much better than free can you get! I've been very pleased with it, as it's my first server setup. Learned a lot and have gotten a lot of help. However,

You could do what we do - just replace the local machine policies each time you rev the policy set. They're stored in c:\windows\system32\grouppolicy. Using gpscript.exe (Google for it, don't have a specific site) you can dump the contents of either registry.pol file to text. You can also recombine textfiles back into a .pol file, and subsequently rev the gpt.ini file so your new .pol

Hello everyone First off, I'm not exactly a Windows 2000 expert (to clear that up) but I did manage to get Samba working as the primary domain controler and successfully log into the domain via a workstation running Windows 2000 (yay!). Mandatory and roaming users all seem to work fine but now I am stuck at permissions. Here's my exact problem: I have two groups on my Samba server -

I'm installing a Samba 3.0 PDC with LDAP backend in a classroom in a Spanish school. Client workstations are Windows2000 and, in the future, there will be Linux clients. I'm following the Samba Project Documentation book (also known as Samba Howto Collection). The document is wonderfull, but there is a part that I don't fully understand, maybe because, as you can read, I'm not a

Hi, A few weeks ago I announced a rewritten PROFILES.txt on the mailing list. It is available on http://users.iafrica.com/p/pc/pcs/profiles.txt The idea of it is to explain exactly how NT and 95 handles roaming profiles and then specify how to set up samba to enable both to handle roaming profiles. Most of the document it finished, and I would like to contribute it, but I have a few things to

Talking to myself again ;-) Samba-tool is working a little bit different then the silo/policy management on a Windows-DC. On a Windows-DC after assigning the user and host to the silo you have to assign the silo to the user and the host. When assigning the user and host to the silo with samba-tool, the assignment to the user and the host will be done at the same time. So now my policy looks

We are using a system running Red Hat Linux 7.0 with Samba 2.2.7a as our PDC. For the most part, we want to use roaming profiles, so that users' settings are backed up via the PDC, and are available if they need to change or reinstall their Windows desktop machine. However, there are a few Windows systems (running NT 4.0 or Windows 2000) for which we would like to be able to disable roaming

Hi! I have a problem using ntconfig.pol-policies for domain groups other than "Domain Users" and "Domain Admins". I am using Samba 2.2.7 with LDAP support as a PDC. Policies work as expected for "Domain Users" and "Domain Admins" but setting policies for any other group doesn't work. The "Browse"-list for AddGroups in poledit only shows

Just a quick congrats to John for repling to this email constructivly. Too often do people fire out the ole RTFM speel. More people within the OpenSource community could do with taking a leaf out of his book. On topic for a second, do not discount being able to lower the spec of the below machine due to careful implementation and installation. You may wish to take a look at the kernel

Not quite 4 years ago I replaced our office SBS 2008 server with Samba4. I added Group Policies one of which was for Redirected Folders. I created a new GPO, "HPRS Groups" and did Edit > User Configuration > Policies > Windows Settings > Folder Redirection > right-click on Documents > Properties > Target = Settings Basic - Redirect everyone's folder to the same

Well, I put it here. All the experience gained in about-half-an-year-management of Samba-PDC + numerous NT4 workstations is included. Also, I'd be glad to hear from you what did I miss! 1) when NT4-workstations are organised into "domain", there's some action assosiated to this: "to log into domain". samba ain such case acts as PDC (primary domain controller),

Hi, I have set up samba to enable Domain-Logons for windows95/98. I am using Samba-1.9.18p7. I have a share netlogon with a batchfile for connection network drives. Everything is working. But when I create a policies file and put it onto the netlogon share windows doesn't use it. I have named it config.pol. Is there another special thing to configure? I have found archives of this

Thanks Rob for chiming in. Stefan, I do want to be very clear, one of the big challanges that we as developers face building these kind of tools is that we don't run AD domains day-to-day. So we really value good feedback on the ergonomics. If you can test with our work in progress, we are keen to adapt the tooling where possible to be more in line with what is 'naturally expected, so