[Samba] Netlogon

[Melvin Wong]

Hi,
I've just configure my Samba 3.0.7 as a PDC with an LDAP-based backend. Everthing seems fine except that my logon.bat is unable to execute when my users login to their XP. If I manually run //bilbo/netlogon/logon.bat on XP, the script will run without any problems. Is this purely a samba problem or it is due to my ldap configuration? Do I need to include ntconfig.POL in the netlogon directory? If only someone can help as I cannot seem to find any solution. Below is my smb.conf file:

[global]
        workgroup = test
        netbios name = BILBO
        #interfaces = 192.168.88.13
        #username map = /etc/samba/smbusers
        #admin users= @"Domain Admins"
        server string = Samba Server %v
        security = user
        encrypt passwords = Yes
        min passwd length = 3
        obey pam restrictions = No
        ldap passwd sync = Yes
        #unix password sync = Yes
        passwd program = /usr/local/sbin/smbldap-passwd -u %u
        #passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new password*" %n\n"
        passwd chat = "Changing password for*\nNew password*" %n\n *success*
        passwd chat debug = Yes
        #ldap passwd sync = Yes
        log level = 2
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 100000
        name resolve order = wins bcast hosts
        time server = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        #mangling method = hash2
        Dos charset = 850
        Unix charset = ISO8859-1

        logon script = logon.bat
        logon drive = H:
        logon home =
        #logon path =
        logon path = \\%L\profiles\%u

        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        passdb backend = ldapsam:ldap://127.0.0.1/
        # passdb backend = ldapsam:"ldap://127.0.0.1/ ldap://slave.idealx.com"
        # ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
        ldap admin dn = cn=Manager,dc=muvee,dc=com
        ldap suffix = dc=muvee,dc=com
        ldap group suffix = ou=Groups
        ldap user suffix = ou=Users
        ldap machine suffix = ou=Computers
        #ldap idmap suffix = ou=Users
        ldap idmap suffix = ou=Idmap
        idmap backend = ldap:ldap://127.0.0.1
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        map acl inherit = Yes
        #ldap ssl = start tls
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        ldap delete dn = Yes
        delete user script = /usr/local/sbin/smbldap-userdel "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        delete group script = /usr/local/sbin/smbldap-groupdel "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
        set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
guest ok = Yes
#locking = No

[profiles]
comment = Profile Share
path = /var/lib/samba/profiles
read only = No
profile acls = Yes
nt acl support = Yes
hidden files=desktop.ini
hide files = /desktop.ini/ntuser.ini/NTUSER.*/
hide files = /desktop.ini/
hide files = /var/lib/samba/profiles/*/Start\ Menu/Programs/Startup/desktop.ini