[Samba] Samba and Windows XP

Patrick Bennett Hagen junkmail at hcs.com
Wed Nov 20 17:44:01 GMT 2002


Unfortunately that was not the solution.  I followed the recipe and still
encountered the error.  Here's a more detailed description of the
environment:

A linux server running samba-2.2.6 (compiled with --with-ssl --with-pam) and
openssl-0.9.6g (compiled with shared libraries).  It is configured for
security=user, domain master=yes, preferred master=yes, os level=34, domain
logins = yes.  I have no other Windows servers on the network so Samba is
the only DC (primary or otherwise).  I have 5 workstations all running WinXP
SP1.  I set
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\req
uiresignorseal=0 on each workstation.

I get the message when I attempt to add "Domain Users" to the local machine
group "Administrators".  I've tried using the local machine user
Administrator or the domain admin user "root" but am still unsuccessful.

I haven't found where to configure the equivelent of active directory or
group policies on this release of samba so if anything like that needs to be
configured, it'll have to be on the workstation.

As an aside, I have roaming profiles and they work just peachy.

Other than this issue samba works great!

Thanks in advance for your help.

Patrick

> -----Original Message-----
> From: samba-admin at lists.samba.org [mailto:samba-admin at lists.samba.org]On
> Behalf Of John Russell
> Sent: Tuesday, 19 November 2002 1:32 AM
> To: samba at lists.samba.org
> Subject: Re: [Samba] Samba and Windows XP
>
>
>  this is a security check new to Windows XP (or maybe only
> Windows XP service pack 1).  It can be disabled via a group policy in
> Active Directory.  The policy is:
>
> "Computer Configuration\Administrative Templates\System\User
> Profiles\Do not check for user ownership of Roaming Profile Folders"
>
> ...and it should be set to "Enabled".
>
> Does the new version of samba have an Active Directory analogue?  If so,
> then you may be able to set the policy through this.
>
> If you cannot set group policies in samba, then you may be able to set
> the policy locally on each machine.  If you want to try this, then do
> the following (N.B. I don't know for sure that this will work in the
> same way as a domain group policy):
>
> On the XP workstation log in with an Administrator account.
>
> Click: "Start", "Run"
> Type: "mmc"
> Click: "OK"
>
> A Microsoft Management Console should appear.
> Click: File, "Add/Remove Snap-in...", "Add"
> Double-Click: "Group Policy"
> Click: "Finish", "Close"
> Click: "OK"
>
> In the "Console Root" window:
> Expand: "Local Computer Policy", "Computer Configuration",
> "Administrative Templates", "System", "User Profiles"
> Double-Click: "Do not check for user ownership of Roaming Profile
> Folders"
> Select: "Enabled"
> Click: OK"
>
> Close the whole console.  You do not need to save the settings (this
> refers to the console settings rather than the policies you have
> changed).
>
> Reboot.
>
> ----- Original Message -----
> From: "Patrick Bennett Hagen" <junkmail at hcs.com>
> To: <samba at lists.samba.org>
> Sent: Tuesday, November 19, 2002 5:32 AM
> Subject: [Samba] Samba and Windows XP
>
>
> > I have a domain user that lacks rights to the local machine to run RPC.
> > Under a real Win2k domain, I'd assign the "Domain Users" group to the
> local
> > machine "Administrators" group so I could avoid any registry,
> file system
> or
> > services rights (I don't care if they have full access to the local
> > machine).  When I do that I get an error: "Information returned from the
> > object picker for object "Domain Admins" was incomplete. The object will
> not
> > be processed"
> >
> > I cranked up the verbosity in the log files and I get nothing.
> >
> > Has anyone had and resolved the same problem?
> >
> > Any help or suggestions are appreciated.  I've search hi and lo
> on Google
> (I
> > found one posting last year but he never got a reply and he
> hasn't replied
> > to an email I sent him).  Also, the Samba lists don't have
> anything as far
> > as I can tell...
> >
> > Thanks,
> >
> > Patrick
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>





More information about the samba mailing list