Re: [Samba] Vista - Profile - Local [SOLVED]
Hi everyone, In the end, I managed to solve my problem: "making it possible for two users to use the same Vista profile". So I want to update that thread. -- According to me, what is linked to the Samba problem is that: - one of the two users above is a "Samba user" (a user defined on the Samba server). (The other one is a Vista locally defined user). - And that, for that "Samba user", I didn't want his/her profile to be created on the Samba server. I wanted it to be created locally. -- Actually, the solution described in the previous posts which manipulates the "LocalProfile" and "ProfileImagePath" registry keys works well. The only thing one must do is "shut down" the machine instead of simply "restarting" it after having modified the "ProfileImagePath" key value. I remember now that I had the same problem with XP. (And also, one must concentrate a lot on doing things in the right order... :)). Thanks to people who contributed to that thread. See you, -- Lmhelp -- View this message in context: http://www.nabble.com/Vista---Profile---Local-tp20416486p20657641.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista - Profile - Local
Hi laco, hi Charles, hi others, Thank you for your contributions. > Charles If I do not quote properly, please tell me how to do it nicely. Like that maybe? > Charles -> blabla > laco -> babla > Alex -> blabla It is true that it is important to communicate properly with each other :-) > laco I am working on the solution (steps 1.) to 11.)) that you proposed. I did steps 1.) to 11.) I changed all the key values in both: - A\"Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" - A\"Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" For example: I changed: - the "Personal" key value - in A\"Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" - from "C:\Users\A\Documents" (A = lmhelp.DOMAINNAME here) - to "C:\Users\C\Documents" (C = lmhelp here). When I log in as A (A = DOMAINNAME\lmhelp here) I do not find C's profile (for example, C's desktop background image, C's folders display settings, etc.) (C = HOSTNAME\lmhelp here). (So, remember that I am logged as C.) When I go to: HKEY_USERS -> S-1-5-21... (corresponding to C logged) "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" and "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" I can see that the modifications I did have been well taken into account. Did I do something wrong? > laco -> It is indeed unclear whether you are a) a sysadmin trying to > learn something, or; b) a user who is trying to get around a sysadmin. Dear laco, we are not all working in big companies with a lot of persons working on certain precise aspects of the company, with division of labor. Maybe we are in category "c) Other undefined"! But we all have to make things work in the way we want. :-) Thanks for the precious help you are giving to me, little living being. Regards, -- Lmhelp -- View this message in context: http://www.nabble.com/Vista---Profile---Local-tp20416486p20499784.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista - Profile - Local
Charles Marcus wrote: 2. Your computer can only be joined to one domain at a time. So, you wouldn't be able to do #3 unless you unjoined Domain1 and joined Domain2. That is not, to my understanding, an issue here. You do get a multiple domain names listed in the domain drop down menu at logon if these domains are members of the same forest or if there are trust relations configured in between them. It is thus possible to login into multiple domains on a single box. Depending on the set-up you might end-up with different profiles. Anyway, I'm not a fan of (nor do I use) Vista, and have zero experience with it in a domain environment, so the above link is about all I can offer.. You should give it a try, it is fun! :) lmhelp -> It is indeed unclear whether you are a) a sysadmin trying to learn something, or; b) a user who is trying to get around a sysadmin. If a) is the case, I believe you got enough replies and suggestions that can get you started. If b) is the case, have a word with your sysadmin and ask him if he can make your life easier (likely there have been more users with similar requests before you). He might help or explain to you why such is not a good idea in your environment. Either way, although this issue had little to do with Samba to begin with, unless you have already considered some of the tips given in this thread -- I suggest you try one of the Windows technical forums (although I am not sure if there is anything useful that can be said in addition to what was already said here). -laco. -- Ladislav Ardo Project Manager/Sr.Systems Administrator Telephone: +31-(0)71-5795537 AOES Group B.V. Telefax: +31-(0)71-5721277 Huygensstraat 34 e-mail: [EMAIL PROTECTED] 2201 DK Noordwijk, The Netherlands http://www.aoes.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista - Profile - Local
On 11/13/2008 5:36 AM, lmhelp wrote: > Hi Alex, hi Charles, hi others, > > Thank you for your answers. It would be much easier to continue this discussion if you would follow the standard/accepted quoting methods... > For example, the key "State" in every profile: it can have various > values meaning specific things (I guess) but I didn't manage to find > the documentation for it The only little bit of information I found > is on that web page: > > And it is totally insufficient. I can do nothing with it. So don't try... you are trying to micro manage something that doesn't need and was never intended to be micro managed by end users... > Just to try to agree on what I mean when I talk about > "(Windows) profiles" unnecessarily complicated description... I can simplify it even more... It is just a collection of User specific settings, generally tied to a certain user account and OS version. > As I said, I alternately log on my computer running XP > as: > - HOSTNAME\lmhelp > - or as DOMAINNAME_1\lmhelp > - or even as DOMAINNAME_2\lmhelp > (not at the same time). 1. You can always logon to the LOCAL (HOSTNAME\) user account (unless the local admin had specifically prevented it). 2. Your computer can only be joined to one domain at a time. So, you wouldn't be able to do #3 unless you unjoined Domain1 and joined Domain2. Now, you *could* simply have a LOCAL account, and make sure there are identical user accounts (the name should be the same) in both domains, and make sure the passwords for all of them are identical... then you should be able to access domain resources without any trouble, all using the same local profile... Maybe this is what you meant? > (XP Local User Profiles in a domain environment) > > It is not about Vista. No, but the principle is the same... here is a link that tells you all you should need to know about Vista Profiles in a domain environment: http://technet.microsoft.com/en-us/library/cc766489.aspx > "Domain profile is like this 'username.domainname' > whereas local profile is known only by the user name". > > That is not generally true. That was just a comment by one of the early posters in that thread... try reading the entire thing... the way it really works is spelled out in detail in one of the follow-up posts in that thread/link... Anyway, I'm not a fan of (nor do I use) Vista, and have zero experience with it in a domain environment, so the above link is about all I can offer... -- Best regards, Charles -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista - Profile - Local
lmhelp wrote: Has anyone ever got the same problem as I: - having a LAPTOP running VISTA, - being the ONLY user of that laptop, - having to log SOMETIMES on a given Samba domain, SOMETIMES on another, - wanting to use always the SAME PROFILE whichever the login may be, - wanting that profile to be LOCAL. At your own risk: 1.) Do not specify roaming profile path on domain controllers for domain1\user "A" and domain2\user "B" (that way obviously they will have no roaming profile, only 'cached' profiles on your Vista System C:\Users\A and C:\Users\B (login and logout so they are created) 2.) On Vista system, create new local user "C" 3.) Login as user "C"; make necessary adjustments and logout. You got now new profile in C:\Users\C. Login again as user "C" (make sure that C is admin at this point). 4.) change permissions on C:\Users\C so both so user "A" and user "B" have full control 5.) change permissions on C:\users\A and C:\Users\B to give user "C" full control 6.) open regedit32 7.) select HKEY_Users window and Choose "Load Hive" 8.) locate and select NTUSER.DAT file of user A (C:\Users\A\NTUSER.DAT) and give it a name e.g. "A" 9.) now - you can change the locations of profile folders of the user A, that is: A\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders and A\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders -- change all (or only specific folders if you wish) to point to the profile directories of user "C" 10.) Unload the hive and repeat the process for the user "B" 11.) If you are concerned about security remove admin privileges for user "C" Now all three users A; B and C are using the same profile directories of your choice. -laco. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista - Profile - Local
Hi Alex, hi Charles, hi others, Thank you for your answers. == A little aside == (I want to say that) if Microsoft provided people with: - a great documentation about its "profile" concept - and also, about its registry (name, use and possible values of the various keys) it would prevent me (and others) from modifying the registry in a hazardous way. Having said that, learn that my laptop being new, I can reinstall it if I happen to do something very wrong with my registry. For example, the key "State" in every profile: it can have various values meaning specific things (I guess) but I didn't manage to find the documentation for it The only little bit of information I found is on that web page: http://windowsitpro.com/article/articleid/94677/what-is-the-meaning-of-the-state-value-name-in-a-users-registry-profile.html And it is totally insufficient. I can do nothing with it. = Just to try to agree on what I mean when I talk about "(Windows) profiles" = To me, a (Windows) profile is a set of specific settings concerning both: - the various executables installed on the machine (for example: having a google toolbar in your web browser, having certain settings for your email client, ...) - and also the operating system "itself" (for example: having a particular background image on your desktop, having certain settings for your folders display, having certain environment variables set to particular values, ...). Ok? Do we agree on that approximative definition? = Just to try to be "straight" about my problem... = As I said, I alternately log on my computer running XP as: - HOSTNAME\lmhelp - or as DOMAINNAME_1\lmhelp - or even as DOMAINNAME_2\lmhelp (not at the same time). With XP, in the three cases, I do manage to work with the same settings (the same profile as described above). == Charles' links == Thank you, I read both of them. First link: --- (XP Local User Profiles in a domain environment) It is not about Vista. And also, it doesn't solve the problem I evoke. I just noticed, pardon me, a kind of "approximation" in what is being said: "Domain profile is like this 'username.domainname' whereas local profile is known only by the user name". That is not generally true. When I logged on as "DOMAINNAME_1\lmhelp", a specific directory "C:\Users\lmhelp.DOMAINNAME_1" was created. But, modulo the registry change I did (cf. the end of my last post), when I go to "System -> Advanced -> User Profiles", the profile "DOMAINNAME_1\lmhelp" is said to be local. Apparently "domain profile" and "local profile" are not antinomic notions, contrary to what is said in the link. Second link --- (Cached domain logon information) This is interesting but is not exactly the problem I have because when my laptop is not part of the domain "DOMAINNAME_1", I do not try to log on as "DOMAINNAME_1\lmhelp". I log on to my local machine as "HOSTNAME\lmhelp". === To Alex === > [...] the two domains you're logging on to trust each other [...] I'll try to understand what it means. > Whatever you've managed to make XP do, I'm pretty sure > it isn't a Microsoft-supported configuration - unless > someone else here knows better? Possibly, but with XP I've never had any problems with that. On the contrary, it completely sastified me (apart from the fact I whish I didn't had to use Windows operating systems...). Again, thanks for your contributions and for the time you dedicate to my problem. -- Lmhelp -- View this message in context: http://www.nabble.com/Vista---Profile---Local-tp20416486p20478301.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista - Profile - Local
On 11/12/2008, lmhelp ([EMAIL PROTECTED]) wrote: >> As soon as you unjoin/rejoin a new domain, XP will >> create a username.NEWDOMAIN profile on your laptop. > Apparently it is what Vista is doing... > A c:\Users\lmhelp. is being created. Which is precisely the way it is designed to work... Again - as far as I know, there is NO way to allow a machine to use the same profile for two different domains - unless, as Alex pointed out, the other domain is trusted, but you'll still only be joined to one domain. One possibility would be to make sure that the other domain has a user account created that is identical to the other one, but you will have to manually keep the passwords in sync - meaning, if you change your password on your main machin, you'll have to chage the password for that account on the other domain account to be the same. > I have found a little thing: > I have added: > - a DWORD value > - in "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" > - with name "LocalProfile" > - and value 1 (to say "Only allow local user profiles"). > I actually it works: I find again my previous profile. > > > But now, I want my "ProfileImagePath" key to be set to the unique > local profile I want to use: "c:\Users\lmhelp" > > Simply changing the value: > "HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows NT > -> CurrentVersion -> ProfileList -> ProfileImagaPath" > from "c:\Users\lmhelp." > to "c:\Users\lmhelp" > doesn't work. > I cannot log in as "\lmhelp" again after > that change. I would strongly urge you not to muck around with these registry settings unless you really know what you are doing... Here is a thread that discusses how user profiles are created that may be of some help, http://tiny.pl/s86h -- Best regards, Charles -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista - Profile - Local
On 11/12/2008, lmhelp ([EMAIL PROTECTED]) wrote: > I can tell you it is possible with XP. No, it isn't... what you describe below is NOT logging onto two different DOMAINS, it is using a domain profile, but NOT a ROAMING profile. > I can log on my computer: > as "\lmhelp" > as well as "\lmelp" > using exactly the same profile located at > "C:\Documents and Settings\lmhelp". > It is very convenient. > But to do so, one has to edit the registry. All you have to do is have XP (or Vista) set up to allow the use of cached domain credentials... this will allow someone to log onto, for example, a laptop that is joined to a domain, when it is not physically connected to the domain, using the domain profile, whether it is a roaming or local profile. See: http://support.microsoft.com/kb/q172931/ I know of no way to use the same profile for different DOMAINS, but would be most happy to learn of a way to do so (that isn't some kind of ugly hack)... -- Best regards, Charles -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Vista - Profile - Local
> > I can tell you it is possible with XP. > > I can log on my computer: > > as "\lmhelp" > > as well as "\lmelp" > > using exactly the same profile located at "C:\Documents and > > Settings\lmhelp". > > It is very convenient. > > But to do so, one has to edit the registry. > > I don't understand how that's possible. Your machine cannot be logging > on to the other domain, so the only way this is possible so far as I > know is if the two domains you're logging on to trust each other? I just re-read that. OK, so in your example you're using the same profile to log on to your local machine, and the domain. That's quite different from using the profile to log on to a second domain too. Whatever you've managed to make XP do, I'm pretty sure it isn't a Microsoft-supported configuration - unless someone else here knows better? Alex -- Alex Harrington - Network Development Manager Longhill High School t: 01273 391672 e: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Vista - Profile - Local
> - > > It's not possible so far as I know. > - > > I can tell you it is possible with XP. > I can log on my computer: > as "\lmhelp" > as well as "\lmelp" > using exactly the same profile located at "C:\Documents and > Settings\lmhelp". > It is very convenient. > But to do so, one has to edit the registry. I don't understand how that's possible. Your machine cannot be logging on to the other domain, so the only way this is possible so far as I know is if the two domains you're logging on to trust each other? Alex -- Alex Harrington - Network Development Manager Longhill High School t: 01273 391672 e: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Vista - Profile - Local
Thank you for your answer Alex. - > It's not possible so far as I know. - I can tell you it is possible with XP. I can log on my computer: as "\lmhelp" as well as "\lmelp" using exactly the same profile located at "C:\Documents and Settings\lmhelp". It is very convenient. But to do so, one has to edit the registry. - > As soon as you unjoin/rejoin a new domain, XP will > create a username.NEWDOMAIN profile on your laptop. - Apparently it is what Vista is doing... A c:\Users\lmhelp. is being created. - > The closest I can suggest is to have the laptop in > a workgroup, and just map drives as required? - I am not sure I understand that. NEW: I have found a little thing: I have added: - a DWORD value - in "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" - with name "LocalProfile" - and value 1 (to say "Only allow local user profiles"). I actually it works: I find again my previous profile. But now, I want my "ProfileImagePath" key to be set to the unique local profile I want to use: "c:\Users\lmhelp" Simply changing the value: "HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows NT -> CurrentVersion -> ProfileList -> ProfileImagaPath" from "c:\Users\lmhelp." to "c:\Users\lmhelp" doesn't work. I cannot log in as "\lmhelp" again after that change. Thanks in advance for your help. -- Lmhelp -- View this message in context: http://www.nabble.com/Vista---Profile---Local-tp20416486p20459254.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Vista - Profile - Local
> Has anyone ever got the same problem as I: > - having a LAPTOP running VISTA, > - being the ONLY user of that laptop, > - having to log SOMETIMES on a given Samba domain, SOMETIMES > on another, > - wanting to use always the SAME PROFILE whichever the login may be, > - wanting that profile to be LOCAL. It's not possible so far as I know. A domain profile, local or otherwise, is specific to that domain. As soon as you unjoin/rejoin a new domain, XP will create a username.NEWDOMAIN profile on your laptop. The closest I can suggest is to have the laptop in a workgroup, and just map drives as required? Alex -- Alex Harrington - Network Development Manager Longhill High School t: 01273 391672 e: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista - Profile - Local
Hi, I really do not manage to find "a kind of" "Windows Vista Registry Reference" to know what are the possible values and meanings of the keys which can be found in a Windows profile... like "State", "CentralProfile" or "ProfileImagePath" for instance. I suspect that "they" hide that kind of information. Has anyone ever got the same problem as I: - having a LAPTOP running VISTA, - being the ONLY user of that laptop, - having to log SOMETIMES on a given Samba domain, SOMETIMES on another, - wanting to use always the SAME PROFILE whichever the login may be, - wanting that profile to be LOCAL. I am a bit desperate. Thanks in advance for any help, any advice, any clue, any intuition, ... -- Lmhelp -- View this message in context: http://www.nabble.com/Vista---Profile---Local-tp20416486p20458341.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Vista - Profile - Local
Hi everyone, Thank you for reading my post, here is my problem. In my network, there are: - a "Samba" server, acting as a domain controller, - a laptop running "Windows Vista Business". Suppose: - the laptop hostname is "anthracite", - the server hostname is "chrome", - and the "Samba" domain name is "iode". I may log in my system as: - "anthracite\lmhelp" - or as "iode\lmhelp". I want to use the same "Windows" PROFILE in both cases. And I want that profile to be a LOCAL one (not a ROAMING one). When I log as "anthracite\lmhelp", I am already using a local profile, say "P". I want "P" to be my profile when I log as "iode\lmhelp". With "Windows XP", I knew how to set up things. Now, with "Vista", when I go to: "Control Panel -> System -> Advanced -> User Profiles, Settings" The "iode\lmhelp" profile type is "Roaming". The "Local profile" radio button is uncheckable. When I go to the registry: "HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows NT -> CurrentVersion -> ProfileList" I have the following profile: === S-1-5-21-2597649628-1181931583-1240522751-3024 === CentralProfile\\chrome\lmhelp\profile.V2 Flags 0 ProfileImagePathC:\Users\TEMP.IODE ProfileLoadTimeHigh0 ProfileLoadTimeLow0 RefCount 2 Sid 01 05 00 00 00 00 00 05 15 00 00 00 dc fc D4 a9 3f d8 72 46 ff df f0 49 d0 0b 00 00 State 0x0a04 (2564) === If I set the flag "State" to 0x0 then I can check the "Local profile" radio button in the "User Profiles" settings. But it is not taken into account. When I leave and go back to it, the profile type it is set to "Roaming profile" again. Can you help me solve my problem? Thanks in advance, -- Lmhelp -- View this message in context: http://www.nabble.com/Vista---Profile---Local-tp20416486p20416486.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
