samba problem updated

From: Michael S. Dunsavage (mikesd_at_frontiernet.net)
Date: 11/28/03

  • Next message: Jason Dixon: "RE: DNS not responding"
    To: redhat-list@redhat.com
    Date: Thu, 27 Nov 2003 22:49:33 -0500
    
    

    I pin pointed the problem to a security issue.

    Apparently the use or Administrator group must own the profile directory, but
    if I change the profile path to /home/user/%u then that current owner does
    own the directory ( i did do a chown just to be sure).

    Sooo

    According to M$ when SP 4 is installed on 2k pro...

    "In the released version of Windows XP (before Service Pack 1), and versions
    of Windows 2000 earlier than Service Pack 4 (SP4), Windows does not check the
    permissions of the target roaming profile folder if it already exists when a
    roaming user profile is created. This behavior might permit an individual to
    create another user's roaming profile folder in advance and to set
    permissions that might permit the creator of the folder to visit the folder
    later. The creator might then be able to modify the user's roaming user
    profile, or to deny access to the legitimate user."

    Sooooo the question now being: How the hell do I make this work?

    All the fixes I found by MS to edit the group policy, but doesn't that
    require Active directory?

    p.s MS's tech note is here:
    http://support.microsoft.com/default.aspx?scid=kb;en-us;327462

    Thanx in advance

    -- 
    Michael S. Dunsavage
    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: Jason Dixon: "RE: DNS not responding"

    Relevant Pages

    • Re: Cannot locate roaming profile
      ... Folders When You Make a Roaming User Profile ... Windows cannot locate your roaming profile and is ... causes of this error include network problems or insufficient ...
      (microsoft.public.windows.terminal_services)
    • Re: User Name Change ** Important **
      ... If so, after updating the profile path, you will need to rename their roaming profile folder on the server to match. ...
      (microsoft.public.windows.server.active_directory)
    • Re: New users dont have roaming profiles any more
      ... XP Pro Clients have been working off roaming profiles for years, ... Looking at the roaming profile folder nothing gets uploaded (profile ... I've checked the profile path when configuring the new user. ...
      (microsoft.public.windows.server.sbs)
    • Re: roaming profiles
      ... Especially the "Add the Administrators security group to the roaming user ... profile share" policy setting. ... I know that I can highlight multiple users and set the path to ...
      (microsoft.public.windows.server.active_directory)
    • Re: User Profiles
      ... in fact it starts from Windows Server 2003, Windows XP SP1, and Windows 2000 SP4: ... Windows XP SP1 and Windows 2000 SP4 checks for existing roaming user profile folders when a roaming user profile is created ... Logon to a system as a "Template" account and make all ...
      (microsoft.public.windows.server.general)