similar to: gpedit.msc as centralized policy for 2k/xp clients

I found this from http://charon.minilab.bdeb.qc.ca/anonym/nt/2000/ads/TTGW2KGP_Vol1through4.pdf I would like to figure out how to do this gpedit.msc+AD+gpc+gpt magic for win2k/xp with linux+samba(2.2/3.0/tng)+openldap and is it possible at all? Thanks. Although GPOs provide significantly more policy features than NT 4.0 System Policy provides, GPOs are stored and processed differently than NT

Hi, first of all: my name is uli... i'm from bavaria/germany and i'm working with linux quite a long time (maybe 10 years). Now my "problem": my samba is setup with ldap-backend. my configuration with mandatory profiles is working quite good. i created a Default User - Profile in my netlogon-share (migrated from a windows-xp client). ntuser.dat has been renamed to ntuser.man.

What is the easiest way to allow normal users to install printers (which are available through a Samba server)? Normally, Windows 2000 and XP need to have a printer installed by the admin first on a given workstation - only the it can be used by the user. I want to allow the user to install own printers. Now, when one trises to right click on a printer on a server and "connect", he

Plan to use W2K PDC and a couple of Samba 2.2.8 file servers. Has anyone used the preconfigured templates that are shipped with W2K server(basicdc.inf, securedc.inf) on their PDC? Gotchas? Landmines? Necessary Modifications? Hudson __________________________________________________ Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!

Hi all, I'm trying to configure samba as PDC, I have a problem when windows client log in this is the error: Windows cannot load the profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off I have samba-3.0.11 and smbldap-tools-0.8.8. I tryed also samba-3.0.14 and smbldap-tools-0-9.1, I have the same problem on Gentoo and on

Raj, > I have noticed that it is causing a problem for some other software > also. I know that i need to grant local admin rights for that user > but what is the best method on doing this? > If I try to access softare by logging in as root on the win2k boxon > the pdc domain it still prevents me from installing a palm pilot or > running some particular software. > All of the

Hello everybody, We need to configure Samba (recent cvs) on our Linux (SuSE 7.2) box (iptables/FreeSwan) acting as firewall, router and VPN gateway. Whenever nmbd or smbclient try to connect to our Samba PDC (WINS ok, IP 192.168.0.5) packets are sent with a source address of the external interface x.y.46.70 and will of course be blocked by iptables and never be routable to subnet 192.168.0.0 . I

Hello, I have a PDC and a File (member) server for homes and profiles (Samba 3.4.17). For XP clients I have mandatory profiles with all user shell folders redirected to their respective home share. Now I'm adding win 7 clients to the mix and I want the same thing. It's (almost) working but I think my procedure is a bit dirty (i.e. I use "windows enabler" to build my ntuser.man

Hello all, I've been trying to figure out what the best way of doing the group policy thing is. We are running samba 3 on slackware 9 with winxp clients. We are a school. i'm unclear on how much AD is actually supported... OU GPO all that. so i decided to go the "administrative template" way (used to be .pol files) I'm thinking of having the students run off of a

Howdy everyone: Here's an interesting one: I have joined a machine to the domain, and I log on. Then, I get a message to the effect that the user's roaming profile couldn't be [loaded or found?], and a local profile will be used instead (and actually this also fails, but is not the point of my question... I don't think). Background ========== I took my previous PDC, and

Well, a rather odd subject, but I couldn't really express it differently. I would simply like to know if the active directory "emulation" of samba+openLDAP+kerberos or samba 3.0 includes support for policies. I have a bunch of XP clients that I need to set some restrictions on. But it seems the days of config.pol files are over, so i need active directory support on my PDC.

Is there any reason to believe that a samba server would be slower when serving up roaming profiles than a real Windows server? I know roaming profiles are slow by nature and that there are things you can do to help like configuring ffolder redirection. But all else being equal, how would a samba server compare to a Windows server when it comes to speed specifically with respect to roaming

Hi. my last post was about upscale configuration for my WinXP clients, because I believed I had it working, but ... Next day I booted the client and .... it wouldnt let me log onto the domain again. :-( I am using Samba 2.2.8a with Ldap backend which works great in workgroup mode. Joining the domain is very easy and works well, but then after rebooting I get: "Es kann keine

Hi, AFAIK, the "logon path" parameter doesn't apply anymore in Samba 4. If you want roaming profiles you have to use profilePath user attribute. This works fine but I have an issue. In my environment we have multiple sites. Each one has its own DC and its own file server. We want to store the profile in the file server, but I couldn't fine a way to fine this. I have to do it

Good morning all! I have two DCs, both running Samba 4.7.3. I have just joined the second DC to the domain. The second DC is replicating AD objects perfectly, I verified this by running "samba-tool drs showrepl" as well as using the ADUC RSAT snapin and adding a user to one DC, then switching the DC that ADUC connects to and verifying that the user was properly replicated. The DNS

I found this page https://bugzilla.samba.org/show_bug.cgi?id=12807 which seemed to have someone experiencing the same issue I am. I tried adding "allow dcerpc auth level connect:dnsserver = yes" to my smb.conf, rebooted the server, but still I get the an access denied message in windows. However, what is logged in the log.samba files has changed since adding this option to my smb.conf.

Hi all, All clients are Win 7. How can I transmit rules defined in gpedit for users (for example forbid execution of regedit) to the Default User roaming profile? Is it done with a ntconfig.pol ? If yes, how can I make it ? Thanks ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

Hello, I'm having one strange issue with latest stable Samba 4.0.4. I'm testing it as a domain controller for two virtual machines. The Samba AD DC is Debian stable, with two domain members - Windows XP Pro and trial Windows 8 Enterprise. User configuration using GPOs is working as expected. However, Computer configuration is never applied properly. Event logs show this entry: ------

The user is a member of "Domain Admins" so they should be able to access the DNS (as is evident by the fact that they can access the DNS thru RSAT on the initial DC). But just to be thorough I have added "Domain Admins" to the group "DnsAdmins" and tested again, still get the "access denied" error from within windows. On Tue, Dec 12, 2017 at 11:01 AM,

Hi there, again me, again similar question. First of all, what is it, what I'd like to have: 1.) Every user in my System should use the same profile. In dsa.msc I gave every user as profile-path \\samba4\profiles\stud 2.) The users should not be able to change anything in that profile (I think changing ntuser.dat to ntuser.man should do the job, proposed i got step one managed ;) )