Topic: PDC win2k usrmgr.exe

[rx7kevin]

Hello,

I need some help getting the sme server pdc setup correctly.
I have one sme server set as domain master, one client pc(win2k) to test. I need to give the standard user on the win2k box more rights than 'user'.  :I have used 'Samba-3 By Example' and 'Liniux for Windows NT/2000 Administrators'n for refrence.  I have changed the smb.conf file using examples from user groups and the manuals.  Any help would be greatly appreciated!

[rx7kevin]

Here is what I am attempting to change:

Adding these entries to smb.conf

under [global]
preferred master = yes
security = server
password server = micro-mt


I change this and restart and then i am unable to login to the domain.

[Mjohnson]

I just solved this same problem on my home network last night.  The default domain User group seems to be restricted user.  This is fine, except for certain network functions and also the fact that my users object strongly when they can't download and install "stuff"!!  Ah well...

Rather than changing the default permisions setup on the SME Server, I changed the user's permissions on the W2K box.  Try: Log on as the Administrator and do the following:  Start > Settings > Control Panel > Users and Passwords > Add > Browse at which point you can select the User you wish to setup on the machine. The final setup screen will allow you to set the users permissions.

This will allow you to control the user permissions, on each network client.  I find this to be a wise default thereby limiting stronger permissions to those individuals and machines that I take specfic action on.  Roaming profiles are nice, but can bugger up the network if you are not careful.

By the way, I have the SME Admin user setup to be a Domain Administrator.  It simplifies admin tasks.

Good Luck.

[rx7kevin]

I can't tell you how much that helped. I have been insalling/reinstalling OSes, searching groups etc.. for the answers. I love open source!

One of my biggest prioblems was installing Office2k under standard user. It will not let you browse for the msi file.

Will making that change on a particular box make it global for that user. Or do you have to adjust every PC locally?

[Mjohnson]

Yes Sir... I have been on the receiving end of so much help throughout my linux journey, it is a pleasure to give back when I can.  Based on my level of expertise, it is not all that often.

Regarding your last question, you will need to add the user to each W2K box with the advanced permission settings.  I have found that most users (here and at work) primarily use only one machine, so it isn't that big of a problem.  They can always log on to any machine, it is just that they will be logged on as a restricted user to machines not previously setup.

So now it is Miller Time.....