[Samba] anti-virus

[David Beards]

Hi Ian,

I see what you're trying to do, and no your correct. I wanted to do a
similar thing such as placing it in to a log on script, however this is
not possible as you can't set up a user from SAMBA to log on as a
service. You would still have to visit every PC to set up the local
security policies, and as long as you're there you may as well do the
SOPHOS install at the same time.

I tried to do a similar thing using Policies to set up a standard
configuration and default SOPHOS settings however it became too messy
due to checksum checks and the inability of the policy editor to set
certain data types that were needed. Oh well, these are some of the
problems we must contend with while trying to appease users, yet stay as
far out of the Microsoft market as we can.

David

P.S. I haven't had a good look at SAV Admin or Enterprise Manager but it
might be possible to use one of these products to do the job for you
from an NT or W2K workstation.

To the list, sorry for going off topic.

Ian Wright wrote:
> 
> Hi David
> Thanks for the reply. What I'm trying to do is deploy samba using Copy Sav
> Config and Paste Sav Config from the server to the workstations, but
> actually deploy from the server. Our PDCs are samba and so there is no "Log
> on as a service" user ( that I am aware of ) option in samba as with a NT
> PDC. The basic problem seems to be that the workstations can't create the
> entries in services. I have been onto Sophos's technical support and they
> did seem to think that it would be possible to do this, but couldn't be more
> specific, so I was just wondering if anybody has.
> Thanks Ian
> ----- Original Message -----
> From: "David Beards" <d.beards at cfa.vic.gov.au>
> To: "Ian Wright" <iwright at ne-worcs.ac.uk>
> Cc: <samba at lists.samba.org>
> Sent: Thursday, January 02, 2003 11:08 AM
> Subject: Re: [Samba] anti-virus
> 
> > Hi Ian,
> >
> > We use SOPHOS in CFA and, sorry, I couldn't quite follow you question.
> > What exactly are you trying to do and what tool are you trying to use?
> >
> > We use the method of installing on each workstation from a CID (at each
> > workstation) which then causes SOPHOS to update automatically. (ala the
> > second part of your email) Time consuming but the only way I could see
> > to do it.
> >
> > As far as using SAV Admin to push the installation out I don't think you
> > can. SAMBA only provides you with an 'NT' like server for sharing of
> > drives and printers. Even if you were running Linux on an x86 platform
> > it wouldn't have the services and function calls required for SAV Admin
> > to do it's job.
> >
> > David
> >
> > > Ian Wright wrote:
> > >
> > > Hello all
> > > Have a small problem. We use Samba as our PDC for a large amount of NT
> > > clients. We also use Sophos anti-virus to protect the workstations and
> > > servers. The problem basically is that although I can get Sophos to
> > > work properly I have to go to the actual workstation to install it
> > > from the server. Once I've done this Sophos works fine and
> > > automatically updates from the server.
> > >     However when I attempt to deploy Sophos from the server to the
> > > workstation it fails to start on the workstation. In a NT PDC domain
> > > the Sophos network user is given the permissions to Log on as a
> > > Service, and this works ok. However in a Samba PDC domain there is no
> > > option that I'm aware of that allows such permissions.
> > >     Does anyone no how I can give the Sophos user sufficient
> > > permissions  to start as a Service with Samba? I've made it domain
> > > adminstrator, but this didn't help.
> > > Thanks Ian
> >
> > --
> > David Beards
> > Technical Manager Networks and Systems
> > CFA
> > 8 Lakeside Drive
> > Burwood East 3151
> >
> > Ph: 9262 8204
> > Mobile: 0419 519 366
> >
> > CAUTION - This message is intended for the use of the individual or
> > entity named above and may contain information that is confidential or
> > privileged.  If you are not the intended recipient of this message you
> > are hereby notified that any use, dissemination, distribution or
> > reproduction of this message is prohibited and that you must not take
> > any action in reliance on it.  If you have received this communication
> > in error, please notify CFA immediately and destroy the original
> > message.
> >

-- 
David Beards
Technical Manager Networks and Systems
CFA
8 Lakeside Drive
Burwood East 3151

Ph: 9262 8204
Mobile: 0419 519 366

CAUTION - This message is intended for the use of the individual or
entity named above and may contain information that is confidential or
privileged.  If you are not the intended recipient of this message you
are hereby notified that any use, dissemination, distribution or
reproduction of this message is prohibited and that you must not take
any action in reliance on it.  If you have received this communication
in error, please notify CFA immediately and destroy the original
message.