Configuration instructions: network logon

To use domain logons and profiles you need to do the following:

1. Create a share called [netlogon] in your smb.conf. This share should be readable by all users, and probably should not be writeable. This share will hold your network logon scripts, and the CONFIG.POL file (Note: for details on the CONFIG.POL file, how to use it, what it is, refer to the Microsoft Windows NT Administration documentation. The format of these files is not known, so you will need to use Microsoft tools).

For example:

[netlogon] path = /data/dos/netlogon

writeable = no

guest ok = no

Note that it is important that this share is not writeable by ordinary users, in a secure environment: ordinary users should not be allowed to modify or add files that another user's computer would then download when they log in.

2. in the [global] section of smb.conf set the following:

domain logons = yes

logon script = %U.bat

The choice of batch file is, of course, up to you. The above would give each user a separate batch file as the %U will be changed to their username automatically. The other standard % macros may also be used. You can make the batch files come from a subdirectory by using something like:

logon script = scripts\%U.bat

3. Create the batch files to be run when the user logs in. If the batch file doesn't exist then no batch file will be run.

In the batch files you need to be careful to use DOS style cr/lf line endings. If you don't then DOS may get confused. I suggest you use a DOS editor to remotely edit the files if you don't know how to produce DOS style files under unix.

4. Use smbclient with the –U option for some users to make sure that the \server\NETLOGON share is available, the batch files are visible and they are readable by the users.

5. You will probably find that your clients automatically mount the \SERVER\NETLOGON share as drive z: while logging in. You can put some useful programs there to execute from the batch files.