[Samba] Centrally stored policies with group settings

Rodger Etz-Brown etz-brown at univention.de
Mon Aug 19 04:06:01 GMT 2002

Dear *,

we are stuck and cannot find anything on the Net or the documentation.

We are currently working on a project that aims to migrate Servers from
a Windows NT domain to a Samba based domain. The migration, as always,
should be completely tranparent to the Windows Desktops and their users.
There are about 300 users and may be 20 groups.

The current domain set-up makes heavy use of policies. The policies are
group based and stored centrally on the DCs.

For the moment we only consider Samba 2.2 as 3 is not released yet and
therefore hard to justify in a production environment.

In one sentence: We need a way to set policies via Samba or any other
mechanism that allows us to specify group based settings, where one user
is part of several groups.

Possible Solutions
Implement Samba 3. As said above, not really a valid option until it's

Or create a policy file for each user by hand and map netlogon to
something like %U. Not feasable as it is too much effort. Especially
when group membership changes. Am not even sure this would work.

Has anybody faced the same issue and found a solution for centrally
stored group based policies using Samba ver 2.2?

Is anybody using Samba 3 in a production environment? If so, have you
experienced any (in)stability problems? (This might help us convince the
customer to let us implement the unreleased version)

Please also let me know if any of the above assumptions are wrong.
Please don't reply if you don't know how Windows NT Policies work or
read this first:

Many thanks in advance,

Rodger Etz-Brown <etz-brown at univention.de> fon:   +49 421 22 08 114 
                                           fax:   +49 421 22 08 115
univention_ GmbH http://www.univention.de/ mobil: +49 179 54 22 947

More information about the samba mailing list