summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJohn Terpstra <jht@samba.org>2003-04-24 22:52:07 +0000
committerJohn Terpstra <jht@samba.org>2003-04-24 22:52:07 +0000
commit5c572b216eb9e9e40e85625ddf71e98f64a57039 (patch)
tree996d7a956182727445e39acaa63063c7051783e5
parente806761ff5a2b4c44edf85230001aa4234e224d1 (diff)
downloadsamba-5c572b216eb9e9e40e85625ddf71e98f64a57039.tar.gz
samba-5c572b216eb9e9e40e85625ddf71e98f64a57039.tar.bz2
samba-5c572b216eb9e9e40e85625ddf71e98f64a57039.zip
Update: ADS: Type, ProfileMgmt: Docs on how to disable roaming profiles
(This used to be commit a154203e338d905dfa9427678dfdb0141dd2f735)
-rw-r--r--docs/docbook/projdoc/ADS-HOWTO.sgml10
-rw-r--r--docs/docbook/projdoc/ProfileMgmt.sgml59
2 files changed, 63 insertions, 6 deletions
diff --git a/docs/docbook/projdoc/ADS-HOWTO.sgml b/docs/docbook/projdoc/ADS-HOWTO.sgml
index c7def652fc..c36f150112 100644
--- a/docs/docbook/projdoc/ADS-HOWTO.sgml
+++ b/docs/docbook/projdoc/ADS-HOWTO.sgml
@@ -56,15 +56,16 @@ In case samba can't figure out your ads server using your realm name, use the
</programlisting></para>
<para>Test your config by doing a <userinput>kinit
-<replaceable>USERNAME</replaceable>@<replaceable>REALM</replaceable></userinput> and making sure that
- your password is accepted by the Win2000 KDC. </para>
+<replaceable>USERNAME</replaceable>@<replaceable>REALM</replaceable></userinput> and
+making sure that your password is accepted by the Win2000 KDC.
+</para>
<note><para>The realm must be uppercase or you will get "Cannot find KDC for requested
realm while getting initial credentials" error </para></note>
<note><para>Time between the two servers must be synchronized. You will get a
"kinit(v5): Clock skew too great while getting initial credentials" if the time
-difference is more than five minutes. </para>
+difference is more than five minutes. </para></note>
<para>
You also must ensure that you can do a reverse DNS lookup on the IP
@@ -86,8 +87,7 @@ If all you want is kerberos support in &smbclient; then you can skip
straight to <link linkend="ads-test-smbclient">Test with &smbclient;</link> now.
<link linkend="ads-create-machine-account">Creating a computer account</link>
and <link linkend="ads-test-server">testing your servers</link>
-is only needed if you want kerberos
-support for &smbd; and &winbindd;.
+is only needed if you want kerberos support for &smbd; and &winbindd;.
</para>
</sect1>
diff --git a/docs/docbook/projdoc/ProfileMgmt.sgml b/docs/docbook/projdoc/ProfileMgmt.sgml
index bc0113baeb..ac61391306 100644
--- a/docs/docbook/projdoc/ProfileMgmt.sgml
+++ b/docs/docbook/projdoc/ProfileMgmt.sgml
@@ -123,6 +123,63 @@ You can support profiles for both Win9X and WinNT clients by setting both the
</programlisting></para>
</sect3>
+<sect3>
+<title>Disabling Roaming Profile Support</title>
+
+<para>
+A question often asked is "How may I enforce use of local profiles?" or
+"How do I disable Roaming Profiles?"
+</para>
+
+<para>
+There are three ways of doing this:
+</para>
+
+<itemizedlist>
+ <listitem><para>
+ <command>In smb.conf:</command> affect the following settings and ALL clients
+ will be forced to use a local profile:
+ <programlisting>
+ logon home =
+ logon path =
+ </programlisting></para></listitem>
+
+ <listitem><para>
+ <command>MS Windows Registry:</command> by using the Microsoft Management Console
+ gpedit.msc to instruct your MS Windows XP machine to use only a local profile. This
+ of course modifies registry settings. The full path to the option is:
+ <programlisting>
+ Local Computer Policy\
+ Computer Configuration\
+ Administrative Templates\
+ System\
+ User Profiles\
+
+ Disable: Only Allow Local User Profiles
+ Disable: Prevent Roaming Profile Change from Propogating to the Server
+ </programlisting><para>
+ </listitem>
+
+ <listitem><para>
+ <command>Change of Profile Type:</command> From the start menu right click on the
+ MY Computer icon, select <emphasis>Properties</emphasis>, click on the "<emphasis>User Profiles</emphasis>
+ tab, select the profile you wish to change from Roaming type to Local, click <emphasis>Change Type</emphasis>.
+ </para></listitem>
+</itemizedlist>
+
+<para>
+Consult the MS Windows registry guide for your particular MS Windows version for more
+information about which registry keys to change to enforce use of only local user
+profiles.
+</para>
+
+<note><para>
+The specifics of how to convert a local profile to a roaming profile, or a roaming profile
+to a local one vary according to the version of MS Windows you are running. Consult the
+Microsoft MS Windows Resource Kit for your version of Windows for specific information.
+</para></note>
+
+</sect3>
</sect2>
<sect2>
@@ -885,7 +942,7 @@ The default entries are:
Common Desktop %SystemRoot%\Profiles\All Users\Desktop
Common Programs %SystemRoot%\Profiles\All Users\Programs
Common Start Menu %SystemRoot%\Profiles\All Users\Start Menu
- Common Startu p %SystemRoot%\Profiles\All Users\Start Menu\Progams\Startup
+ Common Startup %SystemRoot%\Profiles\All Users\Start Menu\Progams\Startup
</programlisting>
</para>