[Samba] Roaming Profiles:Samba PDC:WinXP:User must be local admin

[Zach]

We just experimented with this here at work.  As administrator we
manually deleted the profile of a user at replaced it with a manual
copy of another user's profile, and the problem was reproduced
exactly.  When we subsquently deleted NTUSER.DAT and logged in again,
NTUSER.DAT was rebuilt using the default profile and the profile
loaded properly.  Evidently the SID recorded in NTUSER.DAT has to
match the user's sid or it won't load properly.

Now to find out how to repair/rebuild/migrate NTUSER.DAT without
losing the user's sid without losing the customizations.

Although this has turned out to not really be a Samba problem, I'll
post what I find out since this seems to affect several users on the
list.

Thanks
Zach

On Wed, 29 Sep 2004 10:00:47 -0700, Craig White <craigwhite at azapple.com> wrote:
> On Tue, 2004-09-28 at 11:18, Stefan Wegner wrote:
> > Craig White schrieb:
> >
> > > The 'homes' share should be differentiated from the 'profiles' share if
> > > you desire to have expected behavior. Whether this is an absolute
> > > requirement or not, I have no idea but I do know that I don't have a
> > > problem with roaming profiles and haven't since 2.2.x and it still works
> > > on 3.0.x
> >
> > Doesn't make any difference: profile acls = yes
> > in "homes" is the same behaviour asin "profiles" as long as profiles are
> > located under homes.
> >
> > The prob is still the same:
> > user with local adm-rights = complete profile
> > user with User- or Poweruser- rights = reduced profile (background and
> > other settings)
> >
> > Can you switch the local Rights of your Users from User to Admin and
> > then go back to User without loss in the profile ?
> ----
> I have done that but only once. My users are all NOT local admins or
> power users - they are pretty much unprivileged beyond the local Users.
> Either way (or even switching to and from local Administrator group)
> caused no problem with loading the profile.
> 
> On the samba server(s) - my privileges are different for the homes and
> profiles directories.
> 
> my users homes are in...
> drwxr-xr-x   40 root     root         4096 Sep  8 10:50 users
> and a sample users directory...
> drwx------   19 craig    users-all     4096 Aug 29 17:31 craig
> 
> whereas the profiles...
> 
> drwxrwsr-x   21 Administrator Domain Users     4096 Sep  9 08:53
> profiles
> and a sample profile directory
> drwxr-xr-x   13 test     Domain Users     4096 Jan 26  2004 test
> 
> This has not been a problem for me.
> 
> Craig
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>