[Samba] Windows 2000 clients copying half a profile?

[John H Terpstra]

On Wed, 30 Apr 2003, Dan Gapinski wrote:

> I figured it out. Copying the profile a second time gave way to permissions
> oddity. I found that if I copied the profile over again, and changed the
> allowed user to \Everyone, I could gain access to a profile that exactly
> resembles the original, except for 2 things:
> 1) Microsoft Office Photo Editor doesn't have permission to the registry so
> that it can open a simple JPEG. This is M$'s fault, as detailed in their
> Q260151 article.
> 2) passwords in Outlook Express get lost. I don't know why this happens, but
> seems easy enough to recreate.

Check the Policies section of the new HOWTO and make sure that you migrate
ALL your PST files to a network share. This eliminates 99% of your profile
headaches.


- John T.

>
> People will probably not have this problem happen much at all, since it has
> to do with creating and recreating the same account, and then having to deal
> with undocumented profile consequences.
>
> Thanks again for being so helpful tonight. This midnight oil left me a
> little wiser this time around, and I feel like I can actually administer
> this little beastie now!
>
> My best,
> Dan Gapinski
>
> ----- Original Message -----
> From: "John H Terpstra" <jht at samba.org>
> To: "Dan Gapinski" <DanGapinski at qsi-r2.com>
> Cc: <samba at lists.samba.org>
> Sent: Tuesday, April 29, 2003 10:53 PM
> Subject: Re: [Samba] Windows 2000 clients copying half a profile?
>
>
> > On Tue, 29 Apr 2003, Dan Gapinski wrote:
> >
> > > Thank you again.
> > >
> > > I am having a little weirdness with my Windows 2000 machines logging on
> now.
> > > I have been migrating my small network (a workgroup) over to a Samba PDC
> > > model. In the process of figuring Samba out, I realized I had made a
> mistake
> > > in my account creation, where I didn't do proper group creation and
> > > membership. So instead of modifying the accounts, I thought it might be
> > > better to wipe them out and create new ones. Mistake! All the machines
> > > thought I was using a whole new account and wanted to make new local
> > > profiles, and it was an endless pit of misery to have to recreate each
> > > domain profile, and then copy the local profile info over again.
> > >
> > > I found that my Windows 2000 clients don't import whole profile - the
> > > profile copy doesn't bring over the Active Desktop, wallpaper, and the
> > > graphics file associations (which I'd rather not recreate again)? Is
> that a
> > > permission issue? It seemed to work ok on my Windows NT machine. Given
> that
> > > I recreated the accounts, will that matter, or am I just now noticing a
> > > problem that has been there all along?
> >
> > You will need to work your way through the HOWTO on policies and profiles.
> > Also read the smb.conf man page on the profile ACLs parameter.
> >
> > If you get stuck, email me your full smb.conf (off line) and I will try to
> > help you.
> >
> > - John T.
> > --
> > John H Terpstra
> > Email: jht at samba.org
> >
>
>

-- 
John H Terpstra
Email: jht at samba.org