[Samba] User has no privileges to add printer or even change his wallpaper
Amadej Bukorovic
amadej at minet.si
Sat Jul 27 03:42:01 GMT 2002
You might want to look into ACLs of your W2k worstations..and GPOs..
First off look at the workstation with the printer connected...what are
the permissions for printer access? If Users or at least Authenticated
Users aren't allowed to access it that would explain it...
Second of all...where were your profiles stored on the old W2k server?
Were they roaming/mandatory or were all the profiles stored on local
machines? In
that case: were the users previously Power Users? They belong to the
group
Authenticated users (that goes under the Users group)...
Check the profile paths for users, perhaps they don't have write
permissions
to the profiles..
"Windows 2000 provides three groups whose membership is controlled by
the administrator: Users, Power Users, and Administrators. The group
whose membership is controlled by the operating system or domain is
Authenticated Users. It is the same as the Everyone group, except that
it does not contain anonymous users or guests." and "By default in
Windows 2000, any authenticated user is a member of the Users group."
So I would say to check your permissions/GPOs on your w2k workstations..
Hope I helped a bit,
Amadej.
-----Original Message-----
From: samba-admin at lists.samba.org [mailto:samba-admin at lists.samba.org]
On Behalf Of Lucas Correia Villa Real
Sent: Saturday, July 27, 2002 6:56 AM
To: samba at lists.samba.org
Subject: [Samba] User has no privileges to add printer or even change
his wallpaper
Hello
I have a question related to Samba + Win2k Workstations.
I have replaced a Win2k server by Samba (2.2.4). Everything was fine:
the
users could login and access shares, but they could not connect to
printers shared on another Win2k workstations and even could not change
their wallpapers.
Since I needed to do that work fast, the solution I could find to this
situation was to give to all users admin privileges in their own Win2k
workstations (it was a small network, so this could be done with no
problems).
Although that worked, I really think there´s another way of solving that
problem, so I ask if someone knows how.
Below is my smb.conf file, if this can help somehow.
Thanks,
Lucas
[global]
workgroup = WorkgroupName
netbios name = Server
server string = Server
client code page = 850
character set = ISO8859-1
admin users = admin
load printers = yes
nt acl support = no
log file = /var/log/samba/log.%m
log level = 3
max log size = 500
security = user
smb passwd file = /usr/local/samba/private/smbpasswd
passwd program = /usr/bin/passwd %u
encrypt passwords = yes
unix password sync = yes
passwd chat debug = yes
update encrypted = yes
null passwords = yes
guest ok = yes
socket options = TCP_NODELAY SO_RCVBUF=2048 SO_SNDBUF=2048
hosts allow = 192.168.0. 127.
interfaces = 192.168.0.0/24
bind interfaces only = yes
local master = yes
os level = 65
domain master = yes
preferred master = yes
domain logons = yes
wins support = yes
logon home = \\%L\%U
logon path = \\%L\%U\profile
[netlogon]
comment = Netlogon Service
path = /var/samba-logon
guest ok = yes
public = yes
writable = yes
[D]
comment = Caneta
path = /mnt/caneta
available = yes
browseable = yes
read only = no
public = yes
guest only = no
guest ok = yes
writable = yes
only user = no
create mask = 777
directory mask = 777
delete readonly = yes
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
More information about the samba
mailing list