[Samba] A Group Policy Question in Win9x (yes, another one).

[Ryan Novosielski]

I can tell you what's missing John. :)

The thing that I have been having great difficulty understanding, and this
could be because of lack of Windows knowledge but bear with me, is how you
can have DIFFERENT policy files based on... well, anything. I know group
support is limited... how about even based on NetBIOS name as I can easily
get that from %m at least. I know, for example, the profile of a Win2k
machine will be located in \\SERVER\NETLOGON\Default Profile, but what if
I want to have one for lab PC's and one for Office PC's, and for some
remote sites, none at all, just authentication? I know how to implement
policies per user, too, but I don't want to have to login as the user, set
the policy and then save the policy and log out. How can I apply a policy
to a user based on some arbitrary information? Is the logon script early
enough to do some work behind the scenes to smylink the proper files into
the right place, or... am I totally off track here? I'm sure this is
something everyone does, but I can't for the life of me figure out the way
to make this stuff apply to different users differently.

---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  |  | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| |  | |__/ | \| _|  | novosirj at umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630

On Fri, 2 May 2003, John H Terpstra wrote:

> On Fri, 2 May 2003, Nathan wrote:
>
> > John:
> >
> > Thank-you for the immediate reply.
> >
> > By pointing me to a document for version 3.0, does this mean that group
> > policies (in Win9x) do not work for versions < 3.0?  As I am running a 2.2.x
> > version, and the 3.0 version is still in BETA (as far as I know), I would
> > like to know if I can implement group policies in the version I'm running.
>
> Samba does NOT implement group policies - your MS Windows client does.
> What samba has to implement is the NETLOGON share in which you need to
> place your Config.POL file. Samba also needs to be configured to support
> network logons. ie: In smb.conf [globals]
> 	domain logons = Yes
>
> So what else is missing from the HOWTO? I do need to know.
>
> - John T.
>
> >
> > Thanks,
> > Nathan
> >
> >
> > ----- Original Message -----
> > From: "John H Terpstra" <jht at samba.org>
> > To: "Nathan" <poohsfriend at myeastern.com>
> > Cc: <samba at lists.samba.org>
> > Sent: Friday, May 02, 2003 6:09 PM
> > Subject: Re: [Samba] A Group Policy Question in Win9x (yes, another one).
> >
> >
> > > Nathan,
> > >
> > > Please refer to the following document. It is a work in progress that will
> > > be completed for inclusion in Samba-3.
> > >
> > > If you do NOT find what you need in this document then please let me know
> > > at the earliest opportunity.
> > >
> > > http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf
> > >
> > > Cheers,
> > > John T.
> > >
> > >
> > > On Fri, 2 May 2003, Nathan wrote:
> > >
> > > >     I am wondering if anyone has ever answered the question of group
> > policy operability under Windows 9x.  That is, I am _not_ looking for a
> > work-around but the real thing--one config.pol file to service several
> > groups.
> > > >     I have done my homework, hopefully well, but found nothing.  To
> > prove this, I will quickly summarize my findings below.  Either I have
> > found:
> > > >
> > > > 1. a list of unresolved (mostly unreplied as well) inquiries from the
> > past including some from Sept, Oct, and Dec of 1999, along with the latest
> > inquiry dated July 2002, and others as well. (These were from the SAMBA
> > Mailing List.)
> > > >
> > > > or
> > > >
> > > > 2. a work-around.
> > > >
> > > >     Please let me know if any version <3.0 correctly supports group
> > policies for Win9x machines.
> > > >
> > > >
> > > > Thank-you,
> > > > Nathan Howard
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > > >
> > >
> > > --
> > > John H Terpstra
> > > Email: jht at samba.org
> > >
> >
>
> --
> John H Terpstra
> Email: jht at samba.org
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>