Hi All,
Helping out a friend who uses Samba, and they have asked me to lock down
their Windows 2003 Terminal Servers, so I've used the AllInOne stuff from
Login Consultants. No matter what I've tried I cannot get the policy to
apply to a "group" object, even though it matches.
For example, the userenv.log shows this...
ApplySystemPolicy: Entering
ApplySystemPolicy: PolicyPath is: <\\ts02\lockdown$\TS.pol>.
ApplySystemPolicy: Local PolicyPath is: <C:\Documents and
Settings\testuser1\prf1.tmp>.
MyRegLoadKey: Returning 00000000
ApplySystemPolicy: Looking for user specific policy.
OpenUserKey: No entry for testuser1, using .Default instead.
ApplySystemPolicy: Processing group(s) policy.
GetUserGroups: User is a member of the following global groups:
GetUserGroups:
GetUserGroups: tsusers
ApplySystemPolicy: User belongs to 2 groups.
FindGroupInList: User is NOT a member of the tsusers group.
FindGroupInList: User is NOT a member of the Administrators group.
ApplySystemPolicy: Looking for machine specific policy.
OpenUserKey: Found specific entry for TS02 ignoring .Default.
Now the Samba domain tsusers group is a member of the local Remote Desktop
Users group on the Terminal Servers. And the testuser1 is definitely a
member of this group, so it's weird that it's telling me that the " User
is NOT a member of the tsusers group". I wonder if this is a Samba thing?
It's been years since I've needed to use poledit. Is there some trick I
need to follow to get it to work in this environment?
I guess that I can try to create a local tsusers group and place the Samba
tsusers group in that.
Any advice would be greatly appreciated.
Cheers.
Kind regards,
Jeremy Saunders
Senior Technical Specialist
Infrastructure Technology Services
(ITS) & Cerulean
Global Technology Services (GTS)
IBM Australia
Level 1, 1060 Hay Street
West Perth WA 6005
Postal: PO Box 525, West Perth WA
6872
Visit us at
http://www.ibm.com/services/au/its
P: +61 8 9261 8412 F: +61 8 9261 8486
P: (Reception) +61 8 9261 8420 E-mail:
M: TBA jeremy.saunders@xxxxxxxxxxx
SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
************************************************
