(no subject)

[James B Curry]

"Tyrone D. Faciane Jr." wrote:
> 
> Using Samba 2.0.7 with Win95 clients.  In creating a config.pol
> file, and saving it on my samba server all setting for "Default
> Machine" take effect after a restart.  No setting for "Default
> User" take effect-- ever.
> 
Possible explanations:

A Win 9x machine must have user profiles enabled for user policies to
take effect.  In the Control Panel, open "Passwords" and check under the
tab "User Profiles" to ensure that "Users can customize their
preferences..."

Is your Samba server also your Primary Domain Controller?  (i.e., you're
sure that your policy file is being pulled from your Samba server and
not another server?)

Was the "Default User" account created automatically when you created
the config.pol file, or did you use "Add User" to create it?  If it was
created automatically, so that you only had to make changes to it, I
would expect it to work.  I don't know if any problems could result from
creating it from scratch manually, but thought I'd throw that
possibility out there.

Note that the Default User policy is not the last policy applied. 
Policies are applied in the following order:
    1.  Local policy on PC is applied
    2.  Default User in network policy is applied
    3.  Specific User policy is applied
    4.  If Specific User policy does not exist, apply Group Policies

I'll assume that you know how the checkboxes work and that that is not
the problem.  (A checked box means that a setting will be applied;  an
unchecked box means it will not;  a grey box means not to adjust the
setting from whatever it is now)
>
> Can I use a policies file to restrict access to desktop icons,
> network control panel, My Computer.... for certain users (or all)
> and allow access for others if possible?
> 
Yes.  Open your the config.pol file and choose "Add User", being certain
that the user name properly matches the logon name.  Set that users
policy as appropriate.  Note the order in which policies are applied
(above) to avoid conflicting policies.
>
> Perhaps <username>.pol?  Will this do it?
>
Nope. See above.  

By the way, O'Reilly just put out a book on the Windows System Policy
Editor, called, oddly enough, "Windows System Policy Editor."  It's a
good read and may help you quite a bit.