Curently I have samba configured as this....

  guest account = samba
  printer admin = samba

Ideally we would like to use user level security and have a group in our
ad server of printer admins. However, we have a problem that has forced us
to abondon that scheme. When we used user authentication, and users were
forced to change their passwords every 8 weeks (SOX policy), they were
getting locked out. I suspect this was due to the fact that samba cached
their log in creds or something like that, and AD saw that as a violation
and locked them out.


So I switched to share, and set the guest user to samba and the printer
admin to samba. This gives our users the ability to admin the printers
(not a great feeling). However, we just deployed a number of xp machines,
and this scheme does not work. If I log in on a win2k machine I can get
printer properties, select the advanced tab, and select the new driver
button and add a driver. However, when I log into xp this New Driver
button is greyed out...


Any help would be appreciated.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to