|
Note
When Samba is configured as a domain controller, secure network operation demands that
all MS Windows NT4/200x/XP Professional clients should be configured as domain members.
If a machine is not made a member of the domain, then it will operate like a workgroup
(standalone) machine. Please refer to
Domain Membership, for
information regarding domain membership.
The following are necessary for configuring Samba-3 as an MS Windows NT4-style PDC for MS Windows
NT4/200x/XP clients:
-
Configuration of basic TCP/IP and MS Windows networking.
-
Correct designation of the server role (
security = user).
-
Consistent configuration of name resolution.[2]
-
Domain logons for Windows NT4/200x/XP Professional clients.
-
Configuration of roaming profiles or explicit configuration to force local profile usage.
-
Configuration of network/system policies.
-
Adding and managing domain user accounts.
-
Configuring MS Windows NT4/2000 Professional and Windows XP Professional client machines to become domain members.
The following provisions are required to serve MS Windows 9x/Me clients:
-
Configuration of basic TCP/IP and MS Windows networking.
-
Correct designation of the server role (
security = user).
-
Network logon configuration (since Windows 9x/Me/XP Home are not technically domain
members, they do not really participate in the security aspects of Domain logons as such).
-
Roaming profile configuration.
-
Configuration of system policy handling.
-
Installation of the network driver “Client for MS Windows Networks” and configuration
to log onto the domain.
-
Placing Windows 9x/Me clients in user-level security if it is desired to allow
all client-share access to be controlled according to domain user/group identities.
-
Adding and managing domain user accounts.
|
