Samba 4

[FN-GM]

Someone was telling me that samba 4 supports group policies to lock down machines. Is this true? I can’t find anything on the samba website about it though.

If its true will it lockdown Linux clients or/and Windows Clients?

Will this mean Linux is used more in schools?

[Jackd]

Yep it supports GP's and you can use Active Directory Users and computers you can download it from the samba site

[baxter]

Samba4 is still in alpha and waaaaay away from being stable enough to use in a production environment...

[CyberNerd]

Will this mean Linux is used more in schools?

you don't need GPO to lock down linux machines. Linux isn't used much for school desktops because the software that is advertised to teachers is windows only.

[Geoff]

Indeed, and you don't need GPO's to lock down windows PC's either. You can use mandatory profiles and it works just fine.

[FN-GM]

Ok so how would i lock down Linux on the server for specified users without going to each machine changing settings? Thanks

[Geoff]

Like I said, use mandatory profiles.

[FN-GM]

How do i do that, sorry but i am a newbie to Linux

[Geoff]

You need to define a profiles share in Samba, like so:

[profiles]
comment = Network Profiles Share
path = /srv/samba/profiles
read only = No
store dos attributes = Yes
create mask = 0600
directory mask = 0700
browseable = no
guest ok = no
printable = no
hide files = /desktop.ini/outlook*.lnk/*Briefcase*/

Then carry on as if you were using a Windows Server with the normal Mandatory profile stuff (there's a thread somewhere about that).