similar to: Roaming profiles GPO exclude users

Hi, Just a quick question about Roaming Profiles : Is there a way to force Windows to use Roaming Profils only on the share network, and without local copy ? I set Roaming Profile on a samba share with a GPO, but some users have a big profile so login is very slow Thanks Tom

I've performed a *successful* domain migration from S3/LDAPSAM to S4.0.0. Yay! I can browse and connect to the server from a workstation [logged in as a local account]. DNS looks good. kinit & klist work. I was able to *add* a workstation to the domain. But I can't get roaming profiles to work. On the server the roaming profile looks like - [profiles] path =

I have been working towards retiring my first member server. (Sernet 4.2.14??) Moved all the user files, checked and double checked the ACL's and all seems good. My users redirect folders to my member servers with a GPO policy. I use roaming profiles (again via GPO) that have been confirmed as working properly against the newer member server (running Samba 4.5.3 from source.) Now, the

So, some updates. I started that email a couple of hours ago - but suddenly, without changing a thing, the test client/station is suddenly now getting the correct GPO details. Yet, I've not synced the sysvol or done anything to change or update the GPO on either DC. See inline... RPvs> On Wed, 23 Jan 2019 08:40:55 -0800 RPvs> Gregory Sloop via samba <samba at lists.samba.org>

Hello, I am trying to auto create and mount home directories using a GPO, as per https://wiki.samba.org/index.php/User_Home_Folders. I currently have home directories being created, through the use of pam_mkhomedir.so. with 'obey pam restrictions = yes' in my smb.conf file. I have also setup the share permissions and Windows ACLs as per the above link. Unfortunately, even though the

So, I'm seeing some very odd behavior. I may have multiple issues - so I'm simply starting holding the thread of the problem and working my way back. So, the root symptom I'm having is that a GPO isn't applying correctly. [Roaming profiles namely.] I have two DC's. I change the GPO on one DC and rsync the update to the other DC. I can see that the files get updated. Yet when

Hello friends, how are you? I'm testing the roaming profile and setting up the server path for each user works fine. But, when using GPO as described below, it?s not working. https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles#Using_a_Group_Policy_Object Is it possible to check if the GPO is working properly? Thanks!

I've got roaming profiles for one account on a Debian/Jessie AD DC server but I can't get them to work for the other accounts. The differences are that the one account is also a Linux account in the AD DC and is in the Domain Admins group. The other accounts were created with ADUC on a Windows 7 machine logged in as the Domain Admins user just mentioned. They are Domain Users but not

Hello, I set up Samba as an AD-controller as described in the documentation, that is with "samba-tool domain provision --use-rfc2307 --interactive", https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO. I used Debian 7.8 as basis and the current packages (last Friday) from Sernet for Samba 4.1. Now I try to set up roaming profiles as described by Microsoft here:

> >> I've connected a Windows 7 client and logged in with a roaming profile >> user, copied some 4GB of data in the profile and logged out. Surely enough, >> the data was synchronized but when I login and logout again, the profile >> gets copied on the samba server in full versus just the modified data. > >> For instance, if the profile on the server has 4GB

Marc, thank you very much! Yes, I saw many tutorials, but many are showing how to set a DC and also the shares on it self; what it is not recommended. Others are showing how to manage Users with Windows tools. > If you set the attributes in the user objects, you can use ldbedit. To > do it via GPO, you have to use the Windows tools. However it allows you > to define it per domain or

Hello, I created a GPO Roaming Profiles redirection in my AD as shown on this page (https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles#The_Windows_Roaming_Profile_Versions). The data are stored in a sharing file server (samba member domain). When I open a windows user session it doesn't work. Event observer says "Access denied". So I changed 'chmod 1750

Hello @ALL planning to set my first samba4 ad-dc (coming from Samba3 NT-domain). Trying to fulfill the recommendation to separate the domain controller from the file server and needing roaming profiles, I do not understand where I have to declare and locate the Profiles and Home shares. Is it possible to declare the profiles and homes on the DC (smb.conf) and point their paths to the member

On 03/07/15 17:45, Gary Dale wrote: > On 03/07/15 02:44 AM, Gary Dale wrote: >> I've got roaming profiles for one account on a Debian/Jessie AD DC >> server but I can't get them to work for the other accounts. The >> differences are that the one account is also a Linux account in the >> AD DC and is in the Domain Admins group. The other accounts were >>

Hello All, I have a problem with my roaming profiles where they are becoming too large due to the Thunderbird mail accounts (stored by default) in Application Data. What I would like to do is exclude this directory from being part of the roaming profile. How can I do this? Also, how hard is it to have some users not use a roaming profile but others continuing to use a roaming profile? We

Right now, RSAT seems not to be an option for me, as the only Win systems here are XP... None of my PDC users were brought over with classicupdate. Perhaps becuase my users are LINUX user accounts? And the home directories map to /home/user ? So I would think I need to start adding users and put them into groups. How? And I am reading:

Hi I have folder redirection working fine in XP. I see that W7 has taken the same configuration as I made in XP. Here is a screenshot: http://dl.dropbox.com/u/45150875/gpo.png Unfortunately, on w7, whilst the roaming profile is correctly set, there is no folder redirection. Nothing appears in the \\hh1\USERS folder for the user who has logged in. Upon opening the GPO editor as Administrator

So, trying to get profiles working. The GPO is there and functioning. However, the user isn't able to create the needed directory for *initial* setup of the profile. [It's possible if I hand-created the profile directory for the user, and granted them rights, it would work properly. But it is vastly easier to have the user create their own directory at first login. I'm sure that's

Hello Marc, First of all. https://abhijitw.wordpress.com/2012/03/03/the-local-system-account/ is really outdated. The Explanation is simply incomplete. Yes, localy there is SYSTEM. But due to some i think sid/rid whatever wrong mapping its not working correctly in samba when you use GPO settings also. Per example. And its the last time im telling it. I beleave that, somewhere somehow, the

On 04/07/15 00:58, Gary Dale wrote: > On 03/07/15 01:21 PM, Rowland Penny wrote: >> On 03/07/15 17:45, Gary Dale wrote: >>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>> server but I can't get them to work for the other accounts. The >>>> differences are that the