Samba PDC and permissions
Hey all.. I have samba (FC5, ver 3.0.24) running as a PDC on my server. Users are able to authenticate fine with the server, as well as get their roaming profile. The only catch is that if the user trying to login has no LOCAL admin account on the PC they are using to log into the domain, they are VERY restricted (ie: cannot change background, theme, unlock the taskbar, etc. The users in question are in the group "users," which is net groupmapped as follows:
Domain Users (S-1-5-21-3146726387-3788954289-1565107996-1015) > users
If the user has a local admin account on the PC they are using, everything works flawlessly...however they have admin rights to everything...which I'm not crazy about. I know there are a lot of people out there who have setup samba PDC's with roaming profiles correctly. Let me know if you have any suggestions. When I get home, I can post more info from my server if needed. Thanks!