Re: [Samba] Domain user printing

2010-10-26 Thread Lukasz Zalewski

On 25/10/2010 19:52, Robert Moskowitz wrote:

It looks like a domain user has NO printing permission.

Do I need Policy Editor for this? Where do I get it to run on an XP Pro
system?

I have seen various notes about this, but I can't make head or tails of
them.




Robert,
Have a look at 
http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba
This explains deployment of system policy through samba 3.X. It also 
outlines the difference between system policy and group policy
You can still use Local Group Policy (through gpedit.msc), but as the 
name suggests its local to every machine, and not deployable from the 
Domain Controller.
If you using samba4 have a look at 
http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Installing_Windows_Remote_Administration_Tools_onto_Windows
These tools include Group Policy Management console that works very well 
with samba4


HTH

Luk
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Domain user printing

2010-10-26 Thread Robert Moskowitz

On 10/26/2010 06:39 AM, Lukasz Zalewski wrote:

On 25/10/2010 19:52, Robert Moskowitz wrote:

It looks like a domain user has NO printing permission.

Do I need Policy Editor for this? Where do I get it to run on an XP Pro
system?

I have seen various notes about this, but I can't make head or tails of
them.




Robert,
Have a look at 
http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba
This explains deployment of system policy through samba 3.X. It also 
outlines the difference between system policy and group policy
You can still use Local Group Policy (through gpedit.msc), but as the 
name suggests its local to every machine, and not deployable from the 
Domain Controller.


Thanks for this reference.  I see it is rather old as originally set up 
on '06 and last modified in '08.  It would see that Samba PDC setup 
instructions would do a better job of pointing here.


The 'big item' now is which policy to get the HP printer drivers loaded 
to use the local printer setup, as I could not find it on what is 
available in XP, or I just have not set the policy right yet.  As well 
as what policy is blocking connecting to a printer share.  It would be 
nice if there was some logging of the blocking policy.


If you using samba4 have a look at 
http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Installing_Windows_Remote_Administration_Tools_onto_Windows 

These tools include Group Policy Management console that works very 
well with samba4


FC12 comes with 3.4.9, it seems.  So I am staying with what the distro 
provides.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Domain user printing

2010-10-26 Thread Robert Moskowitz

On 10/26/2010 06:39 AM, Lukasz Zalewski wrote:

On 25/10/2010 19:52, Robert Moskowitz wrote:

It looks like a domain user has NO printing permission.

Do I need Policy Editor for this? Where do I get it to run on an XP Pro
system?

I have seen various notes about this, but I can't make head or tails of
them.




Robert,
Have a look at 
http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba
This explains deployment of system policy through samba 3.X. It also 
outlines the difference between system policy and group policy
You can still use Local Group Policy (through gpedit.msc), but as the 
name suggests its local to every machine, and not deployable from the 
Domain Controller.


What good is it to know how to implement a policy for all computers on 
the domain if you don't know what policy is giving you the problem?


How do I troubleshoot this blockage.   All I get is the print failure 
when using a domain user.



If you using samba4 have a look at 
http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Installing_Windows_Remote_Administration_Tools_onto_Windows 

These tools include Group Policy Management console that works very 
well with samba4


HTH

Luk


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Domain user printing

2010-10-26 Thread Dale Schroeder

On 10/26/2010 11:15 AM, Robert Moskowitz wrote:

On 10/26/2010 06:39 AM, Lukasz Zalewski wrote:

On 25/10/2010 19:52, Robert Moskowitz wrote:

It looks like a domain user has NO printing permission.

Do I need Policy Editor for this? Where do I get it to run on an XP Pro
system?

I have seen various notes about this, but I can't make head or tails of
them.




Robert,
Have a look at 
http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba
This explains deployment of system policy through samba 3.X. It also 
outlines the difference between system policy and group policy
You can still use Local Group Policy (through gpedit.msc), but as the 
name suggests its local to every machine, and not deployable from the 
Domain Controller.


What good is it to know how to implement a policy for all computers on 
the domain if you don't know what policy is giving you the problem?


How do I troubleshoot this blockage.   All I get is the print failure 
when using a domain user.


Robert,

Are any of the group policies in the following section set?  A previous 
email stated you were looking at templates under Computer 
Configuration, so check under


*User Configuration*\Administrative Templates\Control Panel\Printers

Details here:
http://support.microsoft.com/kb/319939

Dale




If you using samba4 have a look at 
http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Installing_Windows_Remote_Administration_Tools_onto_Windows 

These tools include Group Policy Management console that works very 
well with samba4


HTH

Luk


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Domain user printing

2010-10-26 Thread Robert Moskowitz

On 10/26/2010 01:51 PM, Dale Schroeder wrote:

On 10/26/2010 11:15 AM, Robert Moskowitz wrote:

On 10/26/2010 06:39 AM, Lukasz Zalewski wrote:

On 25/10/2010 19:52, Robert Moskowitz wrote:

It looks like a domain user has NO printing permission.

Do I need Policy Editor for this? Where do I get it to run on an XP 
Pro

system?

I have seen various notes about this, but I can't make head or 
tails of

them.




Robert,
Have a look at 
http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba
This explains deployment of system policy through samba 3.X. It also 
outlines the difference between system policy and group policy
You can still use Local Group Policy (through gpedit.msc), but as 
the name suggests its local to every machine, and not deployable 
from the Domain Controller.


What good is it to know how to implement a policy for all computers 
on the domain if you don't know what policy is giving you the problem?


How do I troubleshoot this blockage.   All I get is the print failure 
when using a domain user.


Robert,

Are any of the group policies in the following section set?  A 
previous email stated you were looking at templates under Computer 
Configuration, so check under


*User Configuration*\Administrative Templates\Control Panel\Printers

Details here:
http://support.microsoft.com/kb/319939


This looks promising.  That is exactly the error message I got when 
trying to connect to the PDC's print share.


The kb only shows how to add this to the registry, not set it as a 
policy.  But the links for the SPE may be a help for this...





Dale




If you using samba4 have a look at 
http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Installing_Windows_Remote_Administration_Tools_onto_Windows 

These tools include Group Policy Management console that works very 
well with samba4


HTH

Luk


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Domain user printing

2010-10-25 Thread Robert Moskowitz

It looks like a domain user has NO printing permission.

Do I need Policy Editor for this?  Where do I get it to run on an XP Pro 
system?


I have seen various notes about this, but I can't make head or tails of 
them.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba