From 20967627378194121bc48bf387838b8bd7682478 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Tue, 18 Mar 2003 16:48:14 +0000 Subject: Regenerate (This used to be commit 25db62e3101dbcae8e9daee3cb16430297afa223) --- docs/htmldocs/groupprofiles.html | 73 +++++++++++++++++++++------------------- 1 file changed, 38 insertions(+), 35 deletions(-) (limited to 'docs/htmldocs/groupprofiles.html') diff --git a/docs/htmldocs/groupprofiles.html b/docs/htmldocs/groupprofiles.html index c9184032aa..6741aa3599 100644 --- a/docs/htmldocs/groupprofiles.html +++ b/docs/htmldocs/groupprofiles.html @@ -2,10 +2,10 @@ Creating Group ProfilesCreating Group Prolicy FilesNextChapter 20. Creating Group ProfilesChapter 19. Creating Group Prolicy Files

20.1. Windows '9x

19.1. Windows '9x

You need the Win98 Group Policy Editor to set Group Profiles up under Windows '9x. It can be found on the Original @@ -106,25 +106,28 @@ CLASS="FILENAME" > that needs to be placed in the root of the [NETLOGON] share. If your Win98 is configured to log onto the Samba Domain, it will automatically read this file and update the -Win98 registry of the machine that is logging on.

All of this is covered in the Win98 Resource Kit documentation.

If you do not do it this way, then every so often Win98 will check the +>If you do not do it this way, then every so often Win9x/Me will check the integrity of the registry and will restore it's settings from the back-up -copy of the registry it stores on each Win98 machine. Hence, you will notice -things changing back to the original settings.

The following all refers to Windows NT/200x profile migration - not to policies. +We need a separate section on policies (NTConfig.Pol) for NT4/200x.

20.2. Windows NT 4

19.2. Windows NT 4

Unfortunately, the Resource Kit info is Win NT4/2K version specific.

Unfortunately, the Resource Kit info is Win NT4 or 200x specific.

Here is a quick guide:

I am using the term "migrate" lossely. You can copy a profile to +>I am using the term "migrate" lossely. You can copy a profile to create a group profile. You can give the user 'Everyone' rights to the profile you copy this to. That is what you need to do, since your samba domain is not a member of a trust relationship with your NT4 PDC.

20.2.1. Side bar Notes

19.2.1. Side bar Notes

You should obtain the SID of your NT4 domain. You can use smbpasswd to do this. Read the man page.

20.2.2. Mandatory profiles

19.2.2. Mandatory profiles

The above method can be used to create mandatory profiles also. To convert a group profile into a mandatory profile simply locate the NTUser.DAT file @@ -230,9 +233,9 @@ CLASS="SECT2" >

20.2.3. moveuser.exe

19.2.3. moveuser.exe

The W2K professional resource kit has moveuser.exe. moveuser.exe changes the security of a profile from one user to another. This allows the account @@ -243,9 +246,9 @@ CLASS="SECT2" >

20.2.4. Get SID

19.2.4. Get SID

You can identify the SID by using GetSID.exe from the Windows NT Server 4.0 Resource Kit.

20.3. Windows 2000/XP

19.3. Windows 2000/XP

You must first convert the profile from a local profile to a domain profile on the MS Windows workstation as follows:

NextAppendixesSecuring Samba