this is a security check new to Windows XP (or maybe only Windows XP service pack 1). It can be disabled via a group policy in Active Directory. The policy is:
"Computer Configuration\Administrative Templates\System\User Profiles\Do not check for user ownership of Roaming Profile Folders" ...and it should be set to "Enabled". Does the new version of samba have an Active Directory analogue? If so, then you may be able to set the policy through this. If you cannot set group policies in samba, then you may be able to set the policy locally on each machine. If you want to try this, then do the following (N.B. I don't know for sure that this will work in the same way as a domain group policy): On the XP workstation log in with an Administrator account. Click: "Start", "Run" Type: "mmc" Click: "OK" A Microsoft Management Console should appear. Click: File, "Add/Remove Snap-in...", "Add" Double-Click: "Group Policy" Click: "Finish", "Close" Click: "OK" In the "Console Root" window: Expand: "Local Computer Policy", "Computer Configuration", "Administrative Templates", "System", "User Profiles" Double-Click: "Do not check for user ownership of Roaming Profile Folders" Select: "Enabled" Click: OK" Close the whole console. You do not need to save the settings (this refers to the console settings rather than the policies you have changed). Reboot. ----- Original Message ----- From: "Patrick Bennett Hagen" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, November 19, 2002 5:32 AM Subject: [Samba] Samba and Windows XP > I have a domain user that lacks rights to the local machine to run RPC. > Under a real Win2k domain, I'd assign the "Domain Users" group to the local > machine "Administrators" group so I could avoid any registry, file system or > services rights (I don't care if they have full access to the local > machine). When I do that I get an error: "Information returned from the > object picker for object "Domain Admins" was incomplete. The object will not > be processed" > > I cranked up the verbosity in the log files and I get nothing. > > Has anyone had and resolved the same problem? > > Any help or suggestions are appreciated. I've search hi and lo on Google (I > found one posting last year but he never got a reply and he hasn't replied > to an email I sent him). Also, the Samba lists don't have anything as far > as I can tell... > > Thanks, > > Patrick > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
