[Samba] Re: suddenly its not possible to load server-based profile when loggin on

[Martin Thomas]

>I'm running Samba 2.2.2 as a PDC for W2k-clients. Everything used to work
>just fine, but since yesterday the server-based profile couldn't be read at
>logon. Cleints tells "Access denied". The logfile tells: ...

First: delete the locally cached user profiles on the clients (xx:\documents and settings\...)
Attention: copy them to a save place fist - some user data may be stored
in this area which is not part of the roaming profile (have seen it sometimes with 
MS Outlook).

It may also be caused by a 'lost' PDC-SID. Locate the file MACHINE.SID on the server
(maybe in /usr/locale/samba/private), make a copy to a safe place and
replace it with the one from you older backup - check if the files are identical - if not,
this should be the reason for your problem, keep the older file and try to logon.

Setting nt acl support = false in the profile-share configuration may help too.

Good luck,
Martin