- Timestamp:
- Oct 30, 2009, 9:39:05 AM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.3.x/docs/htmldocs/Samba3-HOWTO/PolicyMgmt.html
r274 r342 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 26. System and Account Policies</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"><link rel="home" href="index.html" title="The Official Samba 3.3.x HOWTO and Reference Guide"><link rel="up" href="optional.html" title="Part III. Advanced Configuration"><link rel="prev" href="AdvancedNetworkManagement.html" title="Chapter 25. Advanced Network Management"><link rel="next" href="ProfileMgmt.html" title="Chapter 27. Desktop Profile Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 26. System and Account Policies</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AdvancedNetworkManagement.html">Prev</a> </td><th width="60%" align="center">Part III. Advanced Configuration</th><td width="20%" align="right"> <a accesskey="n" href="ProfileMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter 26. System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="orgname">Samba Team</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><code class="email"><<a class="email" href="mailto:jht@samba.org">jht@samba.org</a>></code></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="PolicyMgmt.html#id2658804">Features and Benefits</a></span></dt><dt><span class="sect1"><a href="PolicyMgmt.html#id26589 09">Creating and Managing System Policies</a></span></dt><dd><dl><dt><span class="sect2"><a href="PolicyMgmt.html#id2659098">Windows 9x/ME Policies</a></span></dt><dt><span class="sect2"><a href="PolicyMgmt.html#id2659235">Windows NT4-Style Policy Files</a></span></dt><dt><span class="sect2"><a href="PolicyMgmt.html#id2659457">MS Windows 200x/XP Professional Policies</a></span></dt></dl></dd><dt><span class="sect1"><a href="PolicyMgmt.html#id2659906">Managing Account/User Policies</a></span></dt><dt><span class="sect1"><a href="PolicyMgmt.html#id2660133">Management Tools</a></span></dt><dd><dl><dt><span class="sect2"><a href="PolicyMgmt.html#id2660145">Samba Editreg Toolset</a></span></dt><dt><span class="sect2"><a href="PolicyMgmt.html#id2660228">Windows NT4/200x</a></span></dt><dt><span class="sect2"><a href="PolicyMgmt.html#id2660268">Samba PDC</a></span></dt></dl></dd><dt><span class="sect1"><a href="PolicyMgmt.html#id2660332">System Startup and Logon Processing Overview</a></span></dt><dt><span class="sect1"><a href="PolicyMgmt.html#id2660490">Common Errors</a></span></dt><dd><dl><dt><span class="sect2"><a href="PolicyMgmt.html#id2660502">Policy Does Not Work</a></span></dt></dl></dd></dl></div><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 26. System and Account Policies</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"><link rel="home" href="index.html" title="The Official Samba 3.3.x HOWTO and Reference Guide"><link rel="up" href="optional.html" title="Part III. Advanced Configuration"><link rel="prev" href="AdvancedNetworkManagement.html" title="Chapter 25. Advanced Network Management"><link rel="next" href="ProfileMgmt.html" title="Chapter 27. Desktop Profile Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 26. System and Account Policies</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AdvancedNetworkManagement.html">Prev</a> </td><th width="60%" align="center">Part III. Advanced Configuration</th><td width="20%" align="right"> <a accesskey="n" href="ProfileMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter 26. System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="orgname">Samba Team</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><code class="email"><<a class="email" href="mailto:jht@samba.org">jht@samba.org</a>></code></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="PolicyMgmt.html#id2658804">Features and Benefits</a></span></dt><dt><span class="sect1"><a href="PolicyMgmt.html#id2658910">Creating and Managing System Policies</a></span></dt><dd><dl><dt><span class="sect2"><a href="PolicyMgmt.html#id2659098">Windows 9x/ME Policies</a></span></dt><dt><span class="sect2"><a href="PolicyMgmt.html#id2659235">Windows NT4-Style Policy Files</a></span></dt><dt><span class="sect2"><a href="PolicyMgmt.html#id2659457">MS Windows 200x/XP Professional Policies</a></span></dt></dl></dd><dt><span class="sect1"><a href="PolicyMgmt.html#id2659906">Managing Account/User Policies</a></span></dt><dt><span class="sect1"><a href="PolicyMgmt.html#id2660133">Management Tools</a></span></dt><dd><dl><dt><span class="sect2"><a href="PolicyMgmt.html#id2660146">Samba Editreg Toolset</a></span></dt><dt><span class="sect2"><a href="PolicyMgmt.html#id2660228">Windows NT4/200x</a></span></dt><dt><span class="sect2"><a href="PolicyMgmt.html#id2660268">Samba PDC</a></span></dt></dl></dd><dt><span class="sect1"><a href="PolicyMgmt.html#id2660333">System Startup and Logon Processing Overview</a></span></dt><dt><span class="sect1"><a href="PolicyMgmt.html#id2660490">Common Errors</a></span></dt><dd><dl><dt><span class="sect2"><a href="PolicyMgmt.html#id2660502">Policy Does Not Work</a></span></dt></dl></dd></dl></div><p> 2 2 <a class="indexterm" name="id2658790"></a> 3 3 This chapter summarizes the current state of knowledge derived from personal … … 9 9 <a class="indexterm" name="id2658812"></a> 10 10 <a class="indexterm" name="id2658819"></a> 11 <a class="indexterm" name="id265882 5"></a>11 <a class="indexterm" name="id2658826"></a> 12 12 When MS Windows NT 3.5 was introduced, the hot new topic was the ability to implement 13 13 Group Policies for users and groups. Then along came MS Windows NT4 and a few sites … … 17 17 <a class="indexterm" name="id2658844"></a> 18 18 <a class="indexterm" name="id2658851"></a> 19 <a class="indexterm" name="id265886 0"></a>19 <a class="indexterm" name="id2658861"></a> 20 20 <a class="indexterm" name="id2658867"></a> 21 21 <a class="indexterm" name="id2658874"></a> … … 28 28 how to replicate them in a Samba environment. 29 29 </p><p> 30 <a class="indexterm" name="id265889 5"></a>30 <a class="indexterm" name="id2658896"></a> 31 31 Judging by the traffic volume since mid 2002, GPOs have become a standard part of 32 32 the deployment in many sites. This chapter reviews techniques and methods that can 33 33 be used to exploit opportunities for automation of control over user desktops and 34 34 network client workstations. 35 </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id26589 09"></a>Creating and Managing System Policies</h2></div></div></div><p>35 </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2658910"></a>Creating and Managing System Policies</h2></div></div></div><p> 36 36 <a class="indexterm" name="id2658918"></a> 37 <a class="indexterm" name="id265892 4"></a>38 <a class="indexterm" name="id265893 1"></a>37 <a class="indexterm" name="id2658925"></a> 38 <a class="indexterm" name="id2658932"></a> 39 39 <a class="indexterm" name="id2658938"></a> 40 40 Under MS Windows platforms, particularly those following the release of MS Windows … … 71 71 <a class="indexterm" name="id2659052"></a> 72 72 <a class="indexterm" name="id2659059"></a> 73 <a class="indexterm" name="id265906 5"></a>73 <a class="indexterm" name="id2659066"></a> 74 74 Before embarking on the configuration of network and system policies, it is highly 75 75 advisable to read the documentation available from Microsoft's Web site regarding … … 115 115 Windows 9x/Me machine that uses Group Policies. 116 116 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2659235"></a>Windows NT4-Style Policy Files</h3></div></div></div><p> 117 <a class="indexterm" name="id265924 3"></a>117 <a class="indexterm" name="id2659244"></a> 118 118 <a class="indexterm" name="id2659250"></a> 119 119 <a class="indexterm" name="id2659257"></a> … … 147 147 files for Office97 and get a copy of the Policy Editor. Another possible 148 148 location is with the Zero Administration Kit available for download from Microsoft. 149 </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id265941 7"></a>Registry Spoiling</h4></div></div></div><p>149 </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2659418"></a>Registry Spoiling</h4></div></div></div><p> 150 150 <a class="indexterm" name="id2659425"></a> 151 151 <a class="indexterm" name="id2659432"></a> … … 178 178 <a class="indexterm" name="id2659523"></a> 179 179 <a class="indexterm" name="id2659530"></a> 180 <a class="indexterm" name="id265953 6"></a>180 <a class="indexterm" name="id2659537"></a> 181 181 Remember, NT4 policy files are named <code class="filename">NTConfig.POL</code> and are stored in the root 182 182 of the NETLOGON share on the domain controllers. A Windows NT4 user enters a username and password … … 192 192 <a class="indexterm" name="id2659600"></a> 193 193 <a class="indexterm" name="id2659610"></a> 194 <a class="indexterm" name="id26596 19"></a>194 <a class="indexterm" name="id2659620"></a> 195 195 Windows 200x GPOs are feature-rich. They are not stored in the NETLOGON share, but rather part of 196 196 a Windows 200x policy file is stored in the Active Directory itself and the other part is stored … … 279 279 downloaded, parsed, and then applied to the user's part of the registry. 280 280 </p><p> 281 <a class="indexterm" name="id265999 6"></a>281 <a class="indexterm" name="id2659997"></a> 282 282 <a class="indexterm" name="id2660003"></a> 283 283 <a class="indexterm" name="id2660010"></a> … … 309 309 The following sections describe a few key tools that will help you to create a low-maintenance user 310 310 environment. 311 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id266014 5"></a>Samba Editreg Toolset</h3></div></div></div><p>312 <a class="indexterm" name="id266015 3"></a>311 </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2660146"></a>Samba Editreg Toolset</h3></div></div></div><p> 312 <a class="indexterm" name="id2660154"></a> 313 313 <a class="indexterm" name="id2660160"></a> 314 314 <a class="indexterm" name="id2660167"></a> … … 322 322 capabilities will be announced at the time that this tool is released for production use. 323 323 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2660228"></a>Windows NT4/200x</h3></div></div></div><p> 324 <a class="indexterm" name="id266023 5"></a>324 <a class="indexterm" name="id2660236"></a> 325 325 <a class="indexterm" name="id2660242"></a> 326 326 <a class="indexterm" name="id2660249"></a> … … 331 331 </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2660268"></a>Samba PDC</h3></div></div></div><p> 332 332 <a class="indexterm" name="id2660276"></a> 333 <a class="indexterm" name="id266028 2"></a>333 <a class="indexterm" name="id2660283"></a> 334 334 <a class="indexterm" name="id2660289"></a> 335 335 <a class="indexterm" name="id2660296"></a> … … 337 337 <code class="literal">smbpasswd</code>, <code class="literal">pdbedit</code>, <code class="literal">net</code>, and <code class="literal">rpcclient</code>. 338 338 The administrator should read the man pages for these tools and become familiar with their use. 339 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id266033 2"></a>System Startup and Logon Processing Overview</h2></div></div></div><p>339 </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2660333"></a>System Startup and Logon Processing Overview</h2></div></div></div><p> 340 340 The following attempts to document the order of processing the system and user policies following a system 341 341 reboot and as part of the user logon:
Note:
See TracChangeset
for help on using the changeset viewer.
