From 97e3e540f72021d81b34f7597506da6cdc552b8a Mon Sep 17 00:00:00 2001 From: John Terpstra Date: Fri, 8 Jul 2005 10:16:53 +0000 Subject: More updates. (This used to be commit b546de20f793aeec7739ef32451d72582175ae58) --- docs/smbdotconf/logon/logonscript.xml | 48 ++++++++++++++++++++--------------- 1 file changed, 27 insertions(+), 21 deletions(-) (limited to 'docs/smbdotconf/logon') diff --git a/docs/smbdotconf/logon/logonscript.xml b/docs/smbdotconf/logon/logonscript.xml index 847896e1ce..13ce9a0c03 100644 --- a/docs/smbdotconf/logon/logonscript.xml +++ b/docs/smbdotconf/logon/logonscript.xml @@ -4,14 +4,15 @@ type="string" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> - This parameter specifies the batch file (.bat) or - NT command file (.cmd) to be downloaded and run on a machine when - a user successfully logs in. The file must contain the DOS - style CR/LF line endings. Using a DOS-style editor to create the - file is recommended. + + This parameter specifies the batch file (.bat) or NT command file + (.cmd) to be downloaded and run on a machine when a user successfully logs in. The file + must contain the DOS style CR/LF line endings. Using a DOS-style editor to create the file is recommended. + - The script must be a relative path to the [netlogon] - service. If the [netlogon] service specifies a of + The script must be a relative path to the service. If the [netlogon] + service specifies a of /usr/local/samba/netlogon, and STARTUP.BAT, then the file that will be downloaded is: @@ -19,23 +20,28 @@ - The contents of the batch file are entirely your choice. A - suggested command would be to add NET TIME \\SERVER /SET - /YES, to force every machine to synchronize clocks with - the same time server. Another use would be to add NET USE - U: \\SERVER\UTILS for commonly used utilities, or - NET USE Q: \\SERVER\ISO9001_QA for example. + + The contents of the batch file are entirely your choice. A suggested command would be to add NET TIME \\SERVER /SET /YES, to force every machine to synchronize clocks with the + same time server. Another use would be to add NET USE U: \\SERVER\UTILS + for commonly used utilities, or NET USE Q: \\SERVER\ISO9001_QA for + example. + - Note that it is particularly important not to allow write - access to the [netlogon] share, or to grant users write permission - on the batch files in a secure environment, as this would allow - the batch files to be arbitrarily modified and security to be - breached. + + Note that it is particularly important not to allow write access to the [netlogon] share, or to grant users + write permission on the batch files in a secure environment, as this would allow the batch files to be + arbitrarily modified and security to be breached. + - This option takes the standard substitutions, allowing you - to have separate logon scripts for each user or machine. + + This option takes the standard substitutions, allowing you to have separate logon scripts for each user or + machine. + - This option is only useful if Samba is set up as a logon server. + + This option is only useful if Samba is set up as a logon server. + scripts\%U.bat -- cgit