On Thu, 29 Nov 2001, Greg Zartman wrote: > Until Samba implements a wider range of user groups beyond two > (domain users > and domain admins) or MS developers start writing software differently, > users need to have at least power user preveldge to run many apps. The > above parameter places all users in the domain users group which doesn't > provided the needed access rights to run serveral major windows apps > correctly. To see a little sample of what happens, fire up a Win > client and > try to use AutoCAD. > > The correct setting for this parameter, in the short term, should include > all users.
I have to disagree with this, simply because several users in our office would do more damage than good as domain admins because of poor computing habits. Win NT/2000 clients that join a domain automatically include the domain admin group as local admins, meaning that everyone would be a local admin. Better to specify that a particular user is a power user for their particular workstation and avoid the security risks. > 2. Something must be different between samba on SME 5.1 and the current > e-smith-samba RPM as I can't get roaming profiles to work for the > life of me > on SME 5.0 with e-smith-samba-1.1.0-29. On every client, I get an error > message that the profile can't be written back to the server with > the reason > "The process cannot access the file because another process has locked a > poration of the file." Check that strict locking = no in smb.conf, that was my problem before when I received the same error. David M. Brown Frick, Frick & Jett� Architects [EMAIL PROTECTED] -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
