Samba: assign domain group policy through Samba tools?

• Previous message: Randy Orrison: "Re: addressbook recommendations?"
• Next in thread: CW Harris: "Re: Samba: assign domain group policy through Samba tools?"
• Reply: CW Harris: "Re: Samba: assign domain group policy through Samba tools?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Date: Mon, 17 May 2004 03:38:37 -0700
To: debian-user <debian-user@lists.debian.org>

I'm using Samba as a PDC on a domain with ten WinXP Pro clients, on
Debian testing/unstable.

Basic shares work great.

Getting the domain stuff set up was a bit trickier, but the OS News
article[1] and (once I realized the difference between 2.x and 3.x) docs
under /usr/share/doc/samba-doc/htmldocs/ were invaluable. Tricky bit
was creating and mapping groups/users via 'groupadd' and 'net groupmap'.

Printing through CUPS + Samba was a nightmare, but I was under the
delusion it worked when I left work Friday night. Erm. Saturday
morning. Post-sunrise. Tricky bit was adding printer support via
'cupsaddsmb', and deciphering error output (stderr and logs).

I'm stuck on creating a group profile at the domain level, though.

The goal is to have a single point at which I can make
additions/deletions to Desktop, Start Menu, "Favorites" (bookmarks),
Startup, etc. As well as making some registry edits (allowed/disallowed
apps).

I've copied the profile itself, through one of the XP clients, to a
directory under my [profiles] share on the Samba server.

What I don't see is a way to make the association between this profile
and the group ("members") which I'd like to have use this.

I do *NOT have a Win2K server on this domain to handle the mapping. My
understanding is I'd be using the Groups configuration under domain
users and groups. Somewhere.

I also don't find any specific guidance on how to make this association
*at* *the* *domain* *level*.

Chapter 24 of the Samba HOWTO Collection says:

    
    Creating and Managing Group Profiles

    Most organizations are arranged into departments. There is a nice
    benefit in this fact since usually most users in a department
    require the same desktop applications and the same desktop layout.
    MS Windows NT4/200x/XP will allow the use of Group Profiles. A Group
    Profile is a profile that is created first using a template
    (example) user. Then using the profile migration tool (see above),
    the profile is assigned access rights for the user group that needs
    to be given access to the group profile.
    The next step is rather important. Instead of assigning a group
    profile to users (Using User Manager) on a ?per user? basis, the
    group itself is assigned the now modified profile.

OK. What am I missing?

Peace.

--------------------
Notes:

1. http://www.osnews.com/story.php?news_id=6684

-- 
Karsten M. Self <kmself@ix.netcom.com>        http://kmself.home.netcom.com/
 What Part of "Gestalt" don't you understand?
    He that touches pitch shall be defiled.

-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

• application/pgp-signature attachment: Digital signature

• Previous message: Randy Orrison: "Re: addressbook recommendations?"
• Next in thread: CW Harris: "Re: Samba: assign domain group policy through Samba tools?"
• Reply: CW Harris: "Re: Samba: assign domain group policy through Samba tools?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]