similar to: recommended procedure for mandatory roaming profiles for win7 with samba 3

Hello, I have a centOS 5.5 box acting as as a PDC with samba 3.4.9 and openldap 2.4.22. Then I joined the domain with a centOS box (samba 3.4.17) which hosts the homes and profiles. I have no problem with XP clients. I can join a windows 7 client to my domain but it is unable to load the profile when logging in. See below a level 2 log.smdb from the file server when I log in with a domain

Hi list, I'm trying to migrate from a workgroup based Samba server to a domain based Samba server. I need the following features - Roaming profiles - LDAP based user administration / authentication I think the LDAP part is mostly doable, though I do foresee some hair tearing, but my main concern is with the roaming profiles. Users do not have a fixed workstation and log-on to whichever

John, > I would like to figure out how to do this > gpedit.msc+AD+gpc+gpt magic for > win2k/xp with linux+samba(2.2/3.0/tng)+openldap and is it possible at > all? We use local (!) GPOs on our Win2k clients with great success: - log on to "master" workstation as administrator - create a link to the "C:\WINNT\system32\GroupPolicy" folder on your administrator's

Hi there I am setting up a PDC with Centos 5 + Samba 3.5.4 + Openldap with Roaming profiles using kixstart tools to mount shared folder and modifing some registry entries on windows workstations, The Roaming profiles works fine between Win2000 and WinXP. but when I tried to join a Win7 or Vista workstations i get mixed errors. Sometimes the profiles loads sometimes not, or loads badly

Following TOSHARG and "Samba 3 by examples" I implemented Folder redirection plus some security restrictions by building a custom NTUSER.DAT which is the default profile of my users. The problem is that each user has read/write access to its profile share therefore he can replace its NTUSER.DAT. This is why I chose mandatory profiles. Is there another solution? The problem with

Small suggestion. Get this http://www.jam-software.com/freeware/TreeSizeFree.zip Tree Size, go find out how big your profile on you pc is. then check the size on the profile folder of the user. these should be about the same. if not, Logon the server, cleanup the profile of the users. backup and remove the profile of the user on the server. logoff and logon again and check again. Google

Is it possible for a user to change his/her password from Windows? I tried it out last night as a test user against my PDC and it only changed for Samba; I was still able to log into the PDC via SSH using the previous password. (I changed it for the test user as root and it took for both SSH and Windows.) I tried to use smbldap-passwd as the test user, but I got a message back saying I had

Hello! I am running samba 3.0 on fc2 in a win2000 network. I want to use only mandatory profiles in the network, but can't get this to work properly. I have set up a "perfect user" on my local machine", and copied this profile to \\server\netlogon\Default User. I have also made this default profile mandatory by renaming ntuser.dat to ntuser.man. In smb.conf I have added:

Good morning all! I have two DCs, both running Samba 4.7.3. I have just joined the second DC to the domain. The second DC is replicating AD objects perfectly, I verified this by running "samba-tool drs showrepl" as well as using the ADUC RSAT snapin and adding a user to one DC, then switching the DC that ADUC connects to and verifying that the user was properly replicated. The DNS

Hello All, Today I was able to implement Samba4 as a DC with AD in a test environment. I eventually got it all working and was able to join the domain from two different virtual machines. I was also able to set up a roaming profile share and configure a user to utilize this share. My issue is that when I first logged into the domain after setting up the roaming profiles I did so from a

Hello all, I've been trying to figure out what the best way of doing the group policy thing is. We are running samba 3 on slackware 9 with winxp clients. We are a school. i'm unclear on how much AD is actually supported... OU GPO all that. so i decided to go the "administrative template" way (used to be .pol files) I'm thinking of having the students run off of a

Hi, is it possible to create the user profiles by copying a template, change file ownership and modify the SID in NTUSER.DAT using the profile tool? We have many problems with broken profiles. This has become time consuming and frustrating - when a user experiences an error or weird behaviour of an application I can never be sure wether the cause is a "wrong user error", a broken

I found this page https://bugzilla.samba.org/show_bug.cgi?id=12807 which seemed to have someone experiencing the same issue I am. I tried adding "allow dcerpc auth level connect:dnsserver = yes" to my smb.conf, rebooted the server, but still I get the an access denied message in windows. However, what is logged in the log.samba files has changed since adding this option to my smb.conf.

Hello I have exactly the same trouble as described here: http://www.nabble.com/ldap-passwd-sync-on-3.0.25a-tf4261008.html on samba-3.0.25b-2.fc7. When i set "ldap passwd sync" to "only" and I change password on some ldap samba user, password in attribute userPassword is never changed by samba daemon (to update NT and LM password I use smbk5pwd overlay). If i set pwd sync to

Hi, Yesterday I found big problems concerning my roaming profiles. They seem to work on some computers where they are always used, on some other the did not load properly (i.e. a default profile was loaded instead). After some debugging with userenv.log I found the very strange problem: case sensitivity for ntuser.dat!: [...] IsCentralProfileReachable: Testing <F:\testuser\ntuser.dat>

The user is a member of "Domain Admins" so they should be able to access the DNS (as is evident by the fact that they can access the DNS thru RSAT on the initial DC). But just to be thorough I have added "Domain Admins" to the group "DnsAdmins" and tested again, still get the "access denied" error from within windows. On Tue, Dec 12, 2017 at 11:01 AM,

Hello all. I recently upgraded to Samba 3.0 (CVS HEAD) and finally have a working Samba-PDC with Windows 2000 and XP clients. Right now, I'm working with the profiles and I'd like to force some mandatory settings. I read something about using NTUSER.MAN. Can someone further explain this file and how to create it? Here's what I'd like to do: 1) My Documents path = H:\My

I need a little advice on finishing off a Samba PDC. I have Samba 3.0.0RC1 installed and working as a PDC on a Redhat AS 3.0 machine. It authenticates users nicely but the "roaming" profiles don't work. Tailing the samba log, I see the an attempt to access the users ntuser.dat file, which doesn't exist before the first logon, when logging in. The profile directory

Does anyone know if there is a way to disable roaming profiles, for a particular user, from the server side? I thought of trying to blank the server profile string in their account attributes, but of course that says 'use the default' which will be to do whatever smb.conf says. Will setting it to something nonsensical, like a space, make it think to not have one? I'd rather do

I am seeing these in smb.log and each time I do it appears that the user in question is unable to retrieve their roaming profile. Does anyone know what is going on and more importantly, how to cure it? . . . [2017/03/28 16:24:37.426162, 0] ../source3/smbd/oplock.c:713(oplock_timeout_handler) Oplock break failed for file Administrator/AppData/Roaming/Microsoft/Internet Explorer/Quick