[Samba] Windows 2000 clients copying half a profile?

[Dan Gapinski]

I figured it out. Copying the profile a second time gave way to permissions
oddity. I found that if I copied the profile over again, and changed the
allowed user to \Everyone, I could gain access to a profile that exactly
resembles the original, except for 2 things:
1) Microsoft Office Photo Editor doesn't have permission to the registry so
that it can open a simple JPEG. This is M$'s fault, as detailed in their
Q260151 article.
2) passwords in Outlook Express get lost. I don't know why this happens, but
seems easy enough to recreate.

People will probably not have this problem happen much at all, since it has
to do with creating and recreating the same account, and then having to deal
with undocumented profile consequences.

Thanks again for being so helpful tonight. This midnight oil left me a
little wiser this time around, and I feel like I can actually administer
this little beastie now!

My best,
Dan Gapinski

----- Original Message -----
From: "John H Terpstra" <jht at samba.org>
To: "Dan Gapinski" <DanGapinski at qsi-r2.com>
Cc: <samba at lists.samba.org>
Sent: Tuesday, April 29, 2003 10:53 PM
Subject: Re: [Samba] Windows 2000 clients copying half a profile?


> On Tue, 29 Apr 2003, Dan Gapinski wrote:
>
> > Thank you again.
> >
> > I am having a little weirdness with my Windows 2000 machines logging on
now.
> > I have been migrating my small network (a workgroup) over to a Samba PDC
> > model. In the process of figuring Samba out, I realized I had made a
mistake
> > in my account creation, where I didn't do proper group creation and
> > membership. So instead of modifying the accounts, I thought it might be
> > better to wipe them out and create new ones. Mistake! All the machines
> > thought I was using a whole new account and wanted to make new local
> > profiles, and it was an endless pit of misery to have to recreate each
> > domain profile, and then copy the local profile info over again.
> >
> > I found that my Windows 2000 clients don't import whole profile - the
> > profile copy doesn't bring over the Active Desktop, wallpaper, and the
> > graphics file associations (which I'd rather not recreate again)? Is
that a
> > permission issue? It seemed to work ok on my Windows NT machine. Given
that
> > I recreated the accounts, will that matter, or am I just now noticing a
> > problem that has been there all along?
>
> You will need to work your way through the HOWTO on policies and profiles.
> Also read the smb.conf man page on the profile ACLs parameter.
>
> If you get stuck, email me your full smb.conf (off line) and I will try to
> help you.
>
> - John T.
> --
> John H Terpstra
> Email: jht at samba.org
>