[Samba] Vista Roaming Profiles and GPMC.MSC

[Tom Robinson]

Robert Schetterer wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Tom Robinson schrieb:
>> Hi All
>>
>> Our company got a Windows Vista installed laptop even though we ordered
>> it with XP. Now I'm faced with the task of integrating the beast into
>> our samba controlled domain. Something I was hoping to delay for some time.
>>
>> Our PDC is samba 2.2.8a with openldap 2.1.4
>> We also have a Domain Member Server running samba 3.0.10.
>>
>> There is a document on the Microsoft site that I downloaded
>> (http://www.microsoft.com/downloads/details.aspx?FamilyID=311f4be8-9983-4ab0-9685-f1bfec1e7d62&DisplayLang=en)
>> explaining how to do folder redirection so that at least some of the
>> XP/Vista profile will roam. To do this you have to logon to Vista as a
>> "Domain User" and run GPMC.MSC. The problem is that, even though I logon
>> as a domain user (DOMAIN\user) the GPMC.MSC issues the warning:
>>
>>  "To manage Group Policy, you must log on to the computer with a domain
>> user account."
>>
>> With samba 2.2.8a we have no "Domain Users" group. Could this be the
>> problem? How would I add this group to the PDC?
>>
>> Is there a workaround for this?
>>
>> Any help is appreciated.
>>
>> Thanks,
>>
>> Tom
>>
> Hi Tom, i dont think you will get vista to join a samba 2.2.8a pdc
> domain, at my tests upgrade to samba latest was needed to handle vista
> in a minimum, the adm format ( policies ) changed in vista its now called
> admx, after all a simply folder redirect reg patch should work in vista
> include it as local admin,
> i would recommend setup win xp, and wait for stabelizing vista, in mean
> time upgrade your samba setup to latest.
> But maybe someone else can give you more advice handle vista, my tests
> where very basic, cause i will not implement vista anywhere in the next
> year, and will not sombody advice to do so.
> 
> - --
> Mit freundlichen Gruessen
> Best Regards
> 
> Robert Schetterer
> 
> https://www.schetterer.org
> Munich/Bavaria/Germany
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (GNU/Linux)
> Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
> 
> iD8DBQFGDTXjfGH2AvR16oERAjmtAJ9HfVHp2+yZTqQugQmU8IbKcdVkuwCcD25Z
> YVTCYFZmfiejB4iSVQhXHtA=
> =rrYB
> -----END PGP SIGNATURE-----
> 
> 
Hi Robert,

Thanks for your reply.

Surprisingly I have the Vista box already joined to the domain. It 
authenticates to the PDC and logs on sucessfully. So I suspect a problem 
elsewhere in the 2.2.8a config or LDAP.

I can't upgrade so simply on the server as it is the main authentication 
for the entire domain. It is scheduled for upgrade later this year. The 
new Vista laptop is for one of our directors and he wants it working 
now. :-/

I'm not sure what you mean with the reg patch and the admx files. This 
sounds like a workaround that may work for me. How do I integrate the 
admx and reg patches into vista?

Regards,

Tom

-- 
Tom Robinson
Systems Administrator



Intelligent Space
Parchment House
13 Northburgh Street
London
EC1V 0JP
t: 020 7014 5980
f: 020 7014 5981
e: gtempleton at intelligentspace.com
w: http://www.intelligentspace.com

The information in this e-mail and any attachment is confidential. It 
isintended only for the named recipient(s). If you are not a named 
recipient please notify the sender immediately and then delete it 
without disclosing the contents to another person or taking copies.