[Samba] Roaming profiles via GPO and matching rights on a folder

Andreas Bockhold andreas.bockhold at base2itc.de
Mon Mar 30 07:46:04 MDT 2015

Hello Marc,

Am 19.03.2015 um 22:48 schrieb Marc Muehlfeld:

> Am 19.03.2015 um 08:54 schrieb Andreas Bockhold:
> > Now I try to set up roaming profiles as described by Microsoft here:
> > https://technet.microsoft.com/en-us/library/jj649079.aspx
> > 
> > Though I set the folder rights according to step 3 in the Microsoft 
> > documentation my users cannot create their profiles. When I give them 
> > full access for testing purposes it does work.
> Have you seen
> https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles#Implementing_roaming_profiles_with_Samba

Thanks for your reply - sorry for my delay!

Yes, I did follow the instructions, specifically mounting the filesystem (ext4) appropriately and giving the SeDiskOperatorPrivilege to the admin group.

I chose the Windows ACLs way. There I used the rights proposed by Microsoft (see above) - not those by the Samba team. There seem to be some differences? Especially the "samba way" dows not provide SYSTEM with it's rights? Can you give advice, which and why to use?

Best regards,

More information about the samba mailing list