[Samba] window 2000 policy changes with a samba pdc

[Gordon Heydon]

Hello,

I triied this, but it didn't work. Basically I am triing to follow the
"Administration of Windows 200x/XP Policies" to edit policy so that I
can turn off password expiry, but when I follow the instructions it
doen't work.

I would prefer a method of doing this under linux, as it is hard for me
to find all the windows stuff.

Gordon.

* John H Terpstra (jht at samba.org) wrote:
> On Sun, 19 Oct 2003, Gordon Heydon wrote:
> 
> > hello,
> >
> > Thanks for this, but from what I can tell I need to change the domain's
> > password policy for windows 2000 computers. In the how to it says I need
> > to run the Active Directory Users and Computers so I can edit the group
> > policy.
> 
> To create a policy control file (NTConfig.POL) you need the NT4 Grop
> Policy Editor. You can not do this using the Active Directory Tools.
> 
> - John T.
> 
> >
> > Thanks
> >
> > * John H Terpstra (jht at samba.org) wrote:
> > > On Sat, 18 Oct 2003, Gordon Heydon wrote:
> > >
> > > > Hello,
> > > >
> > > > With the release of samba 3.0 I was vey excited with the new features
> > > > and decided to experiment with it.
> > > >
> > > > I set my server up as a pdc which I am still working out some of the
> > > > bugs but all and all I have it going and have a windows 2000 pro client
> > > > join the domain and login and out very easy.
> > > >
> > > > The one problem is that before I roll this out to my other comptuers I
> > > > need to change the policy on changing of passwords so that they will
> > > > never expire. I read the how-to's and then once I had found the Active
> > > > Users and Computers on windows 2000 pro I triied to follow the FAQ and
> > > > connect to the Domain Server and it keeps coming up Cannot connect to
> > > > pre-2000 Domain: ...
> > >
> > > Gordon,
> > >
> > > I checked the HOWTO and it seems we have yet some more work to do to make
> > > it clearer. You can manage your users from a Windows domain member by
> > > using only the SrvTools package. See page 75 of the HOWTO (page 70 of the
> > > book, "The Official Samba-3 HOWTO and Reference Guide") for details on how
> > > to obtain this toolset.
> > >
> > > Please bear in mind that Samba-3 can not be an ADS server, thus you can
> > > not use the ADS management tool to manage it.
> > >
> > > - John T.
> > > --
> > > John H Terpstra
> > > Email: jht at samba.org
> > >
> >
> 
> -- 
> John H Terpstra
> Email: jht at samba.org
> 
-- 
Gordon Heydon <gordon at heydon.com.au>