[Samba] Desktops for non-roaming profiles

[Dennis McLeod]

Yeah, in my domain, it's simply a matter of logging on as the domain user,
then doing the profile copy as described. 
I get all of the user settings, documents, Outlook Profile, etc.
Just not cookies, passwords, etc.
I can open Outlook, but have to re-enter their login information do download
email (POP, not Exchange...).
Same on some websites.
Then there are permission issues, too.
I made a group, (other than domainusers) put my users in there, and made
that group part of the local administrators group.
Does the test user have Administrator permissions on the machine.
Not that you want to run this way, but a good way to test.
How about a domain user with NO local account.
Does that get you a new profile based off of the default profile? With or
without the other issues?
Good luck....
Dennis

The whole thread I gave may be better than that particular message I pointed
you at.:

http://groups.google.com/group/linux.samba/browse_thread/thread/42370eda9bdb
3ef0/9c8b4de804545326?#9c8b4de804545326





-----Original Message-----
From: samba-bounces+dmcleod=foranyauto.com at lists.samba.org
[mailto:samba-bounces+dmcleod=foranyauto.com at lists.samba.org] On Behalf Of
Ryan Steele
Sent: Monday, March 24, 2008 4:19 PM
To: samba at lists.samba.org
Subject: Re: [Samba] Desktops for non-roaming profiles

Hi Dennis,


Dennis McLeod wrote:
> Are you trying to use the EXISTING profile on the machine?

Yeah...

> It's not going to be as seamless as you would like.
>   

Darn.  :-)

> Basically, you will have to sit in front of each machine, join it to 
> the domain, log in as the user into the domain to create the local 
> profile), reboot (to free up the user profile - logging out doesn't 
> work), log in as administrator, look at c:\documents and settings to 
> get the name of the new profile (usually the username appended with a 
> .domainname), then right click on My computer, properties, advanced, 
> user profiles, highlight the old profile, copy to button, point it at 
> the new user profile, change permissions to the new user (or if it's a
generic profile, use "everyone").
> Then, log back out, and in as the NEW domain user, and see what you get.
>   

It does seem to copy the desktop items (and probably other things as well),
but drops me in to C:\, and I get weird behaviors.  It's unable to load the
Windows Classic theme (I get the error "The theme could not load.
Unspecified error."), and exhibits odd behaviors (loading the XP theme turns
the XP theme off, for example).  The permissions look right to me...

> It will not copy cookies or passwords (Outlook) so those will need to 
> be fixed.
>   

How about background, appearance, etc.?  None of those are preserved in my
tests, though it probably has to do with the aforementioned problem
(defaulting to C:\).

> Microsoft has a user migration tool which is supposed to do this, but 
> it doesn't work, IMHO.
>
> I chose to migrate a few, and rebuild a few. It might take me a year, 
> but they'll get moved, eventually.
>
> Also, I had to set local machine policy to "Only allow local profiles" 
> and "Prevent Roaming profile changes from Propagating to the server":
>   

Yeah, that helped.

> Start, Run, gpedit.msc, "Computer Configuration", "Administrative 
> Templates", "system", User Profiles".
> registry string:
>
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
> "LocalProfile"=dword:00000001
> "ReadOnlyProfile"=dword:00000001
>
>
> This might be why it's going to \TEMP. XP want's to pull down a 
> roaming policy, but there exists none.....
>
>   

I think that may be the case as well.

> If that's the case I would suspect you won't have the second 
> (.domainname) profile in c:\documents and settings....
>   

Until I changed those two entries, you're right I didn't.

>
> If you have a local user named bob, and a domain user named bob, and 
> bob already has a local profile, if you log into the domain as bob, 
> you should get a second profile named bob.domainname......
>
>
> HTH,
> Dennis
>
>
> Here's another reference:
> http://groups.google.com/group/linux.samba/msg/9c8b4de804545326
>
>
>   

That didn't seem to fly for me either.

I'm interested to hear what you think with regards to it dropping me to C:\.
The user DOMAINNAME\bob has privileges to access C:\Documents and
Settings\bob.DOMAINNAME, which I overwrote with the existing profile using
the Windows profile copy mechanism.

Thanks for your assistance thus far.

Ryan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba