John H Terpstra schrieb:
On Wednesday 30 April 2008 08:14:17 am Andreas Moroder wrote:
Hello John,
You can name the profile anything you want, so long as the ACLs inside
the profile are correct for the group that needs to be able to access it.
As a general rule, the ACLs should be set so that members of the group
have full control. Then select a user who is a member of that group; set
the profile path to the new group profile; now log on as that user and
edit, or clean up and polish up the setting for that profile. Now log
off. As the Domain Admin rename the user.dat file to user.man.
You now have a "mandatory" (meaning - usr can not change the profile
settings) profile that is accessible only by members of the group.
Now I know how to prepare the mandatory profile.
Group members will be able to access this group profile - but first the
administrator must set their profile path to point to this group profile.
Does this mean, that they have only this profile or is it possible to
have a mandatory group profile and a personal profile ?
I am not aware of any way to implement mulitple additive profiles in Windows
NT4 domain structures.
but there is this note in the howto
"Be careful with group profiles. If the user who is a mem-
ber of a group also has a personal profile, then the result
will be a fusion (merge) of the two."
On the other side chapter 27.6.1
"In any case, you can configure only one profile per user." in chapter
confirmed what you wrote.
This sound a little bit confusing to me
Thanks
Andreas
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
