[Samba] Samba PDC problem

[John H Terpstra]

Folks,

The disabling of sign'n'seal and s-channel support is a BAD idea. It is also 
completely unnecessary if you are using Samba-3 correctly.

- John T.

On Tuesday 12 July 2005 08:32, Louis van Belle wrote:
> what you need is a reg file..
>
> like this.
> /CUT HERE and remove this line
> REGEDIT4
>
> ;------------------MUST----------------------------------------------------
> ; do not roam the following folders
> [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
> "ExcludeProfileDirs"="Temporary Internet Files;History;Temp"
>
> ;------------------MUST----------------------------------------------------
> ; force Windows XP Professional clients to accept Samba as a PDC
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
> "requiresignorseal"=dword:00000000
> "signsecurechannel"=dword:00000000
>
> ;------------------MUST----------------------------------------------------
> ; Do not check for user ownership of Roaming Profile Folders
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
> "CompatibleRUPSecurity"=dword:00000001
>
> ;----------------------OPTIONAL--------------------------------------------
> ; settings for explorer, full path in header
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Cabin
>e tState]
> "Settings"=hex:0c,00,02,00,0b,01,00,20,60,00,00,00
> "FullPath"=dword:00000001
> "FullPathAddress"=dword:00000001
>
> ;----------------------OPTIONAL--------------------------------------------
> ; more custom settings for explorer
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advan
>c ed]
> "Hidden"=dword:00000002
> "ShowCompColor"=dword:00000000
> "HideFileExt"=dword:00000000
> "DontPrettyPath"=dword:00000000
> "ShowInfoTip"=dword:00000001
> "HideIcons"=dword:00000000
> "MapNetDrvBtn"=dword:00000000
> "WebView"=dword:00000000
> "Filter"=dword:00000000
> "SuperHidden"=dword:00000001
> "SeparateProcess"=dword:00000001
> "StartMenuInit"=dword:00000001
> "ShowSuperHidden"=dword:00000001
> "ClassicViewState"=dword:00000001
>
> ;------------------------OPTIONAL------------------------------------------
> ; show the current user and machine name below the My Computer icon
> ; if you look at this with the regedit it looks much less frigtening
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID
>\ {20D04FE0-3AEA-1069-A2D8-08002B30309D}]
> @=hex(2):25,55,53,45,52,4e,41,4d,45,25,20,25,43,4f,4d,50,55,54,45,52,4e,41,
>4 d,\
>   45,25,20,25,55,53,45,52,44,4f,4d,41,49,4e,25,00
>
> ;-------------------------OPTIONAL-----------------------------------------
> ; configure the desktop in a sensile manner ... smaller decorations
> ; smooth fonts, no animation
>
>
> [HKEY_CURRENT_USER\Control Panel\Desktop]
> "FontSmoothing"="2"
> "UserPreferencesMask"=hex:90,32,00,80
> "SmoothScroll"=dword:00000000
>
> [HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
> "BorderWidth"="0"
> "CaptionHeight"="-270"
> "CaptionWidth"="-270"
> "IconSpacing"="-1125"
> "IconTitleWrap"="1"
> "IconVerticalspacing"="-1125"
> "MenuHeight"="-240"
> "MenuWidth"="-240"
> "ScrollHeight"="-210"
> "ScrollWidth"="-210"
> "Shell Icon BPP"="16"
> "SmCaptionHeight"="-225"
> "SmCaptionWidth"="-225"
> "MinAnimate"="0"
> ;-----END
> /CUT HERE and remove this line
>
> >-----Oorspronkelijk bericht-----
> >Van: samba-bounces+louis=van-belle.nl at lists.samba.org
> >[mailto:samba-bounces+louis=van-belle.nl at lists.samba.org]
> >Namens Martin Petersen
> >Verzonden: dinsdag 12 juli 2005 16:26
> >Aan: samba at lists.samba.org
> >Onderwerp: Re: [Samba] Samba PDC problem
> >
> >Hi Nicola,
> >
> >with WinNT, Win2k or WinXP I need to change some permissions.
> >Start on the client machines the Group Policy editor (gpedit.msc) and
> >try to find the switch "Don't check for permissions on profile".
> >
> >I'am sorry but I don't own a Win32 machine right now.
> >
> >Your problem is that the Windows internal permission check
> >fails on the
> >Samba PDC profile.
> >
> >Hope I could help.
> >
> >Martin Petersen
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.