[Samba] Re: Samba instead of SBS2k+3

[Doug VanLeuven]

Przemyslaw Smiejek wrote:
> W odpowiedzi na pismo z niedziela, 20 sierpnia 2006 14:52 
> (autor Robert Schetterer 
> publikowane na gmane.network.samba.general, 
> wasz znak: <44E85B18.90500 at schetterer.org>):
>
>   
>> Hi,
>> jep samba can act as a win nt (4) domain controller PDC.
>>     
>
>
> PDC it's only authorization, as I know. 
>
>   
>> but having Samba in a school enviroment is very typical,
>> there are many special Linux distros for schools which have allready
>> included this look http://www.skolelinux.org
>> and the samba faqs, setting up samba as domain contoller.
>>     
>
> But I need not only user authorization but also tool to set policy on
> workstations.
>
>   
>> But you will make your live much more easier , and save money for the
>> children, if you switch totally to linux.
>>     
>
> That's impossible. :(
>
>   
>> There is nothing on windows which is really need to learn for pupils
>> which cant be handeled by modern linux distros.
>>     
>
>
> There is, unfortunately. It's Windows. There are many windows programs and
> many windows users so I have to have Windows on workstations so I need AD
> to set policy. :(  I want to change my AD to Samba, because I have only 20
> licenses to SBS2k+3 and I want to add more computers.
>
> I see that I have to buy next licenses :(
>   
Actually, there is little being done with GPOs that can't be done by 
registry editing or the older policy editors.  What GPOs offer is 
dynamic application of registry settings, so a student could log in at a 
computer and get one set of policies and then an auditor could set at 
the same computer and get a more relaxed set of policies.  If your 
security is more static with one security model per machine, the older 
policy editors work quite well along with ghosting a prototype machine.  
There are a lot of advantages to ghosting out an entire classroom at one 
time.  Of course, you can't teach "Working with AD".

Regards, Doug