[Samba] Desktops for non-roaming profiles

[Dennis McLeod]

Are you trying to use the EXISTING profile on the machine?
It's not going to be as seamless as you would like.

Basically, you will have to sit in front of each machine, join it to the
domain, log in as the user into the domain to create the local profile),
reboot (to free up the user profile - logging out doesn't work), log in as
administrator, look at c:\documents and settings to get the name of the new
profile (usually the username appended with a .domainname), then right click
on My computer, properties, advanced, user profiles, highlight the old
profile, copy to button, point it at the new user profile, change
permissions to the new user (or if it's a generic profile, use "everyone").
Then, log back out, and in as the NEW domain user, and see what you get.
It will not copy cookies or passwords (Outlook) so those will need to be
fixed.
Microsoft has a user migration tool which is supposed to do this, but it
doesn't work, IMHO.

I chose to migrate a few, and rebuild a few. It might take me a year, but
they'll get moved, eventually.

Also, I had to set local machine policy to "Only allow local profiles" and
"Prevent Roaming profile changes from Propagating to the server":

Start, Run, gpedit.msc, "Computer Configuration", "Administrative
Templates", "system", User Profiles".
registry string:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"LocalProfile"=dword:00000001
"ReadOnlyProfile"=dword:00000001


This might be why it's going to \TEMP. XP want's to pull down a roaming
policy, but there exists none.....

If that's the case I would suspect you won't have the second (.domainname)
profile in c:\documents and settings....


If you have a local user named bob, and a domain user named bob, and bob
already has a local profile, if you log into the domain as bob, you should
get a second profile named bob.domainname......


HTH,
Dennis


Here's another reference:
http://groups.google.com/group/linux.samba/msg/9c8b4de804545326





-----Original Message-----
From: samba-bounces+dmcleod=foranyauto.com at lists.samba.org
[mailto:samba-bounces+dmcleod=foranyauto.com at lists.samba.org] On Behalf Of
Ryan Steele
Sent: Monday, March 24, 2008 1:24 PM
To: samba at lists.samba.org
Subject: [Samba] Desktops for non-roaming profiles

Hi list,

In my current organization, we aren't going to be using roaming profiles
(for various reasons, it's not desired).  I'm moving us from no domain
controller to Samba as a PDC (with an OpenLDAP backend), and I'm trying to
make the process as invisible as possible to the end users.  Each XP user's
local desktop exists at:

C:\Documents and Settings\<username>

...and I'd like Samba to log them in to the domain and use that as their
local desktop.  Currently, on my test machines it's setting their local
desktop as:

C:\Documents and Settings\TEMP

...which isn't quite what I want, as the desktop icons are located in
...\<username>, not ...\TEMP.  I don't get any errors, the Event Viewer
yields nothing, and the folder "C:\Documents and Settings\<username>"
has the proper permissions (as the local machine's administrator, I added
them by browsing to the domain controller and selecting the user from the
list)

In my global section of the smb.conf, I've got:

        domain master = yes
        preferred master = yes
        domain logons = yes
        logon script = logon.bat
        logon drive = H:
        logon home = \\%N\%u

...and the [netlogon] share is pretty vanilla.

I guess what I need to know is whether I can tell Samba somehow to try and
first use "C:\Documents and Settings\<username>", and THEN fall back to
other options.  Is this possible (and feasible)?

Thanks,
Ryan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba