The Domain Users group should have automatically been added to the local users group when you joined the domain.
When I upgraded from Samba 3.0.x to 3.5.x I had a error in the group mappings on one of the DC's that cause problems for a while. I also had to explicitly add a mapping for the nobody user and group. I think I may have explicitly granted the domain administrator the privileged to add machines to the domain http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html#rp-privs But I think I only had to do that because the administrator was not recognized as being a domain admin (or local admin) because the group mapping was broken. If you add a network user to the local admin group, and login works, then there is definitely a local security issue. My guess is that the OS creates the new user local profile directory but then has problems assigning file permissions/ownership for the network user. On XP , if you right click My Computer and look at profiles, you could see if the profile for a user was local, roaming or temporary. Win 7 should have the same option. On 08/09/12 18:03, Brandon wrote: >> Are your group mappings correct? I ask because it may be that the >> "Domain Users" is not properly recognized as a member of the "Users" >> group on the PC. Can you login as the domain (or local) admins and >> explicitly add domain users and domain groups to a local group? > > An update to this: I was able to add domain users after a reboot. So > I've added MYWORKGROUP\myadmin to my Users group on the local machine. > > I was also able to search my domain for users, and came up with a list > of my users, a nobody user, and a Domain Admins group. I've added > MYWORKGROUP\myadmin (user) and MYWORKGROUP\Domain Admins (group) to > the User group on the local machine. I am still getting the same > errors when logging on though. > > It seems to me like it's trying to pull a roaming profile when I have > roaming profiles disabled (or I thought I did), and/or windows doesn't > actually know the netbios name, based on the series of these events: > > Windows cannot copy file \\?\C:\Users\Default\Documents to location > \\?\C:\Users\TEMP.MYWORKGROUP\Documents. This error may be caused by > network problems or insufficient security rights. > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba