[Samba] Roaming Profiles:Samba PDC:WinXP:User must be local admin

[Ilia Chipitsine]

> Okay, thanks for the tip.  I'll try this later today, when I get a chance.
>
> If I understand properly,
>
> I should add
> profile acls = yes
> to smb.conf so that the profiles section looks like:
> [Profiles]
> 	path = /home/samba/profiles
> 	browseable = No
> 	writeable = yes
> 	profile acls = yes
>
> Then for security on the XP machines, disable "bypass traverse
> checking" on each client.
> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/528.mspx

I guess that "bypass traverse checking" is already enabled by default.
well, I didn't try XP SP2 yet :) maybe they have changed it.

>
> Am I missing anything?

no.

>
> Zach
> uid000 at gmail.com
> (previously junkmael99 at hotmail.com)
>
>
>
> On Tue, 28 Sep 2004 20:36:02 +0600 (YEKST), Ilia Chipitsine
> <ilia at paramon.ru> wrote:
>> maybe You guys need to read "man smb.conf" and search "profile acls"
>> there.
>>
>>
>>
>>> sith lord wrote:
>>>
>>>> I'm having a problem with Roaming profiles in Windows XP with Samba as PDC.
>>>> I've googled and trolled the mailing lists and read the Samba
>>>> documentation.
>>>>
>>>> Problem:
>>>> User logs onto domain from WinXP client and profile is downloaded (you can
>>>> tell because it takes a long time and lights on hub are lit up).  However,
>>>> unless that user is in the admin group locally, all/some of the profile
>>>> isn't loaded.  eg, Desktop wallpaper, WinXP theme,  start menu settings,
>>>> etc. are not loaded.  No error is given.  No cached or default profile is
>>>> loaded.   If user is added to local admin group before-hand. everything is
>>>> O.K.  If user is subsequently removed from admin group, problem happens
>>>> again at next login.
>>>
>>> I have EXACTLY the same problem!!!!
>>>
>>> TMS III
>>>
>>>>
>>>>
>>>> What I've tried:
>>>> Upgrade Samba from 2.2 to 3 (currently 3.0.7).
>>>> Set the "Check ownership of profile" option to "disabled" on WinXP client
>>>> local policy (grpedit.msc)
>>>> Check ownership and permissisions on the samba server (though these still
>>>> might not be set properly).
>>>>
>>>> System configuration:
>>>> Server:
>>>> RH9 (all packages updated)
>>>> Samba 3.0.7 (from rpm) (problem happened with 2.2 as well)
>>>> I would post smb.conf, but I don't have it right now.  I can post it later,
>>>> though.
>>>>
>>>> Clients:
>>>> WinXP Pro SP2 (problem happened with pre sp1, & sp1a as well).
>>>>
>>>> I'm not sure if this is an issue with on the samba/linux end or the win xp
>>>> client end.  The same problem happens on both of my win xp clients.  If it
>>>> is on the samba end, I'm wondering if it's related to ownership/permissions
>>>> not being quite right.   It is as if being admin on the local box allows
>>>> you to override whatever the problem is.
>>>>
>>>> Any help is appreciated.  I'll post more info along with smb.conf if anyone
>>>> wants to see it.
>>>>
>>>> _________________________________________________________________
>>>> Check out Election 2004 for up-to-date election news, plus voter tools and
>>>> more! http://special.msn.com/msn/election2004.armx
>>>>
>>>
>>>
>>>
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  http://lists.samba.org/mailman/listinfo/samba
>>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  http://lists.samba.org/mailman/listinfo/samba
>>
>