[Samba] Samba support for ADM files

Kevin Hall kevin.hall at hallictservices.co.uk
Fri Mar 20 21:26:32 GMT 2009

Hi Luk

Thanks for replying. I will have a go.



On Friday 20 March 2009 16:34:52 you wrote:
> Kevin Hall wrote:
> > Hi
> >
> > What I would like to do is have my custom adm files in a shared folder on
> > my samba server so that if I make a change, it updates the windows XP
> > clients on my network in a similar fashion to active directory on a
> > windows server.
> >
> > However, I cannot seem to find any support for this in samba in the
> > documentation I have read. Do I have to go to each machine and  use group
> > policy editor to load the adm file? Am I missing something or is this
> > going to be a feature of samba 4?
> >
> > Regards
> >
> > Kevin Hall
> AFAIK samba 3 only supports system policies and only samba 4 will be
> able to use GPO like policies. Have a look at
> http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba
> This should give you some basic insight on how it all works.
> You can convert existing .adm templates, or write your own ones, to be
> used with system policies by removing appropriate #if version statements.
> Note that system policies have several limitations, i.e. will only be
> synced upon domain logon - i.e. background refresh or boot-time refresh
> will not work, and they will lack some of the rich features of GPO.
> They also work on registry "tatooing principle" so reverting a policy is
> more tricky. We have been using system policies for some time and they
> work pretty well (if you acknowledge their limitations).
> I have written a small tool that can be run as a startup script, or at
> any time, which will convert existing NTConfig.pol data into Local GPO
> information - this might save you the effort of manual adjusting Local
> GPO's on every machine. The utility supports machine policies and user
> policies however the group stuff is missing - we just didn't have a need
> for it
> Luk

More information about the samba mailing list