[Samba] Re: group profiles

[Andreas]

John H Terpstra schrieb:
> On Wednesday 30 April 2008 08:14:17 am Andreas Moroder wrote:
>> Hello John,
>>
>>> You can name the profile anything you want, so long as the ACLs inside
>>> the profile are correct for the group that needs to be able to access it.
>>>
>>> As a general rule, the ACLs should be set so that members of the group
>>> have full control.  Then select a user who is a member of that group; set
>>> the profile path to the new group profile; now log on as that user and
>>> edit, or clean up and polish up the setting for that profile.  Now log
>>> off. As the Domain Admin rename the user.dat file to user.man.
>>>
>>> You now have a "mandatory" (meaning - usr can not change the profile
>>> settings) profile that is accessible only by members of the group.
>> Now I know how to prepare the mandatory profile.
>>
>>> Group members will be able to access this group profile - but first the
>>> administrator must set their profile path to point to this group profile.
>> Does this mean, that they have only this profile or is it possible to
>> have a mandatory group profile and a personal profile ?
> 
> I am not aware of any way to implement mulitple additive profiles in Windows 
> NT4 domain structures.
> 
but there is this note in the howto
"Be careful with group profiles. If the user who is a mem-
ber of a group also has a personal profile, then the result
will be a fusion (merge) of the two."

On the other side chapter 27.6.1
"In any case, you can configure only one profile per user." in chapter
confirmed what you wrote.

This sound a little bit confusing to me

Thanks
Andreas