Unfortunately that was not the solution. I followed the recipe and still encountered the error. Here's a more detailed description of the environment:
A linux server running samba-2.2.6 (compiled with --with-ssl --with-pam) and openssl-0.9.6g (compiled with shared libraries). It is configured for security=user, domain master=yes, preferred master=yes, os level=34, domain logins = yes. I have no other Windows servers on the network so Samba is the only DC (primary or otherwise). I have 5 workstations all running WinXP SP1. I set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\req uiresignorseal=0 on each workstation. I get the message when I attempt to add "Domain Users" to the local machine group "Administrators". I've tried using the local machine user Administrator or the domain admin user "root" but am still unsuccessful. I haven't found where to configure the equivelent of active directory or group policies on this release of samba so if anything like that needs to be configured, it'll have to be on the workstation. As an aside, I have roaming profiles and they work just peachy. Other than this issue samba works great! Thanks in advance for your help. Patrick > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of John Russell > Sent: Tuesday, 19 November 2002 1:32 AM > To: [EMAIL PROTECTED] > Subject: Re: [Samba] Samba and Windows XP > > > this is a security check new to Windows XP (or maybe only > Windows XP service pack 1). It can be disabled via a group policy in > Active Directory. The policy is: > > "Computer Configuration\Administrative Templates\System\User > Profiles\Do not check for user ownership of Roaming Profile Folders" > > ...and it should be set to "Enabled". > > Does the new version of samba have an Active Directory analogue? If so, > then you may be able to set the policy through this. > > If you cannot set group policies in samba, then you may be able to set > the policy locally on each machine. If you want to try this, then do > the following (N.B. I don't know for sure that this will work in the > same way as a domain group policy): > > On the XP workstation log in with an Administrator account. > > Click: "Start", "Run" > Type: "mmc" > Click: "OK" > > A Microsoft Management Console should appear. > Click: File, "Add/Remove Snap-in...", "Add" > Double-Click: "Group Policy" > Click: "Finish", "Close" > Click: "OK" > > In the "Console Root" window: > Expand: "Local Computer Policy", "Computer Configuration", > "Administrative Templates", "System", "User Profiles" > Double-Click: "Do not check for user ownership of Roaming Profile > Folders" > Select: "Enabled" > Click: OK" > > Close the whole console. You do not need to save the settings (this > refers to the console settings rather than the policies you have > changed). > > Reboot. > > ----- Original Message ----- > From: "Patrick Bennett Hagen" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, November 19, 2002 5:32 AM > Subject: [Samba] Samba and Windows XP > > > > I have a domain user that lacks rights to the local machine to run RPC. > > Under a real Win2k domain, I'd assign the "Domain Users" group to the > local > > machine "Administrators" group so I could avoid any registry, > file system > or > > services rights (I don't care if they have full access to the local > > machine). When I do that I get an error: "Information returned from the > > object picker for object "Domain Admins" was incomplete. The object will > not > > be processed" > > > > I cranked up the verbosity in the log files and I get nothing. > > > > Has anyone had and resolved the same problem? > > > > Any help or suggestions are appreciated. I've search hi and lo > on Google > (I > > found one posting last year but he never got a reply and he > hasn't replied > > to an email I sent him). Also, the Samba lists don't have > anything as far > > as I can tell... > > > > Thanks, > > > > Patrick > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
