[Samba] logon scripts by group

Lee Baker lbaker at mcauley.org.uk
Wed Oct 6 15:49:51 GMT 2004

Step 1: 
Create a NETLOGON share with a group variable in the path
e.g. /domain_data/netlogon_shares/%g

Step 2:
In the [globals] section of your conf file enter the name of your script
for 'logon script' (e.g. login.bat)

Step 3:
On your samba PDC create folders for each group name in
/domain_data/netlogon/ (or whatever location you have chosen)
make sure that users will have read only access.

Step 4:
Put your login.bat scripts in each folder (you may want to use symbolic
links if many groups use the same script - it will make it easier to
edit in future).

Hope this helps,

Lee Baker

-----Original Message-----
Sent: 06 October 2004 16:33
To: samba at lists.samba.org
Subject: [Samba] logon scripts by group


I am having a hard time figuring out how to have logon scripts that only

execute if the user is a member of a certain group.  I had the smart
idea of 
putting the supplemental logon script in a share only available to the
and then calling it from the normal logon script using "CALL 
"path_to_script".  However it looks like it always executes that CALL
even if 
the user is not part of a group, and I don't want to confuse my users by
text that goes into the DOS window that pops up to run the logon
Also, somehow I feel like there must be a better way to do this, some
way to 
query Samba for group membership as the user logs in.

Also, is there a such thing as a logoff script?  Or do I need to put
things in postexec scripts?  (things like "net use /d *")

Thanks for your assistance to this non-Windows user!

To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

More information about the samba mailing list