[Samba] Roaming profiles in domain level
Li, Ying (ESG)
ying.li2 at hp.com
Sat Apr 30 02:20:49 GMT 2005
I've finally found out how to use roaming profiles in domain level.
Samba2.2 and 3.0 always checks owner's ACL for profile directories. But
Samba returns correct owner ACL in a little bit different format with
Windows. For example:
Samba as profiles resource responses owner ACL for profile directory:
Num Auth: 5
Windows as profiles resource responses owner ACL for profile directory:
Num Auth: 5
Even profile's owner is a valid domain user with accessible permissions
on all files/directories in profile directory, Windows clients would
disallow to access to profiles, and terminate to send incoming requests
for loading profiles.
Since Windows 2K/XP clients have a registry value to control if to check
owner ACL for profile directories. I used it to not check ownership. Go
to Group policy/Local Computer Configuration/Administrative
templates/System/Logon for Windows 2K/XP, and enable "Do not Check for
User Ownership of Roaming Profiles Folders". The default value is "Not
configured". This works to me.
More information about the samba