[Samba] window 2000 policy changes with a samba pdc

[John H Terpstra]

On Sun, 19 Oct 2003, Gordon Heydon wrote:

> hello,
>
> Thanks for this, but from what I can tell I need to change the domain's
> password policy for windows 2000 computers. In the how to it says I need
> to run the Active Directory Users and Computers so I can edit the group
> policy.

To create a policy control file (NTConfig.POL) you need the NT4 Grop
Policy Editor. You can not do this using the Active Directory Tools.

- John T.

>
> Thanks
>
> * John H Terpstra (jht at samba.org) wrote:
> > On Sat, 18 Oct 2003, Gordon Heydon wrote:
> >
> > > Hello,
> > >
> > > With the release of samba 3.0 I was vey excited with the new features
> > > and decided to experiment with it.
> > >
> > > I set my server up as a pdc which I am still working out some of the
> > > bugs but all and all I have it going and have a windows 2000 pro client
> > > join the domain and login and out very easy.
> > >
> > > The one problem is that before I roll this out to my other comptuers I
> > > need to change the policy on changing of passwords so that they will
> > > never expire. I read the how-to's and then once I had found the Active
> > > Users and Computers on windows 2000 pro I triied to follow the FAQ and
> > > connect to the Domain Server and it keeps coming up Cannot connect to
> > > pre-2000 Domain: ...
> >
> > Gordon,
> >
> > I checked the HOWTO and it seems we have yet some more work to do to make
> > it clearer. You can manage your users from a Windows domain member by
> > using only the SrvTools package. See page 75 of the HOWTO (page 70 of the
> > book, "The Official Samba-3 HOWTO and Reference Guide") for details on how
> > to obtain this toolset.
> >
> > Please bear in mind that Samba-3 can not be an ADS server, thus you can
> > not use the ADS management tool to manage it.
> >
> > - John T.
> > --
> > John H Terpstra
> > Email: jht at samba.org
> >
>

-- 
John H Terpstra
Email: jht at samba.org