How would I modify Windows information via Samba - SMB

This is a discussion on How would I modify Windows information via Samba - SMB ; I have a small network, using squid as the proxy. What I need to do is be able to add the proxy information into each users internet configuration from the Linux/UNIX side (I do not want to have to log ...

+ Reply to Thread
Results 1 to 9 of 9

Thread: How would I modify Windows information via Samba

  1. How would I modify Windows information via Samba

    I have a small network, using squid as the proxy. What I need to do is be
    able to add the proxy information into each users internet configuration
    from the Linux/UNIX side (I do not want to have to log onto the windows
    boxes). It is possible to do and if so, how.

    Thanks
    doverbey@optonline.net



  2. Re: How would I modify Windows information via Samba


    "Overbey" wrote in message
    news:n81if.9281$mM2.4736@fe09.lga...
    > I have a small network, using squid as the proxy. What I need to do is be
    > able to add the proxy information into each users internet configuration
    > from the Linux/UNIX side (I do not want to have to log onto the windows
    > boxes). It is possible to do and if so, how.
    >
    > Thanks
    > doverbey@optonline.net
    >
    >

    I forgot to add I am using Samba 3.0.14a on Red Hat 8. The Samba is also
    acting as a domain controller.
    Thanks again
    doverbey@optonline.net



  3. Re: How would I modify Windows information via Samba

    Assuming I understood you correctly, the short answer is: no.

    A longer answer is: Samba allows Windows clients to access files on a
    (in your case) Linux server. You appear to want to nobble files on the
    Windows clients, something Windows will not allow you to unless the
    users share those directories (big security hole).

    I would have thought that the way to go was simply to tell them the
    proxy settings they need to access the internet. That also gives them
    the freedom to use browsers other than IE if they feel like it.


  4. Re: How would I modify Windows information via Samba

    Overbey wrote:

    >
    > "Overbey" wrote in message
    > news:n81if.9281$mM2.4736@fe09.lga...
    >> I have a small network, using squid as the proxy. What I need to do is
    >> be able to add the proxy information into each users internet
    >> configuration from the Linux/UNIX side (I do not want to have to log onto
    >> the windows
    >> boxes). It is possible to do and if so, how.
    >>

    .....
    > I forgot to add I am using Samba 3.0.14a on Red Hat 8. The Samba is also
    > acting as a domain controller.


    Ok, the less painful way is to configure squid as a transparent proxy and
    probably block direct outgoing html access on the linux firewall/iptables.
    That works for any browser.
    If you must use "regular" proxying, you can do it via policy:
    For IE, you can use (NT)Config.pol in your netlogon share - IE templates are
    available - to set the proxy globally upon logon.
    For firefox, you may provide a default profile which includes the
    appropriate preferences, and add it to each new install. That will affect
    only new users.

  5. Re: How would I modify Windows information via Samba

    Thanks for the reply. Will look into the settings
    Thanks again

    "Vlad_Inhaler" wrote in message
    news:1133079658.904249.203020@z14g2000cwz.googlegr oups.com...
    > Assuming I understood you correctly, the short answer is: no.
    >
    > A longer answer is: Samba allows Windows clients to access files on a
    > (in your case) Linux server. You appear to want to nobble files on the
    > Windows clients, something Windows will not allow you to unless the
    > users share those directories (big security hole).
    >
    > I would have thought that the way to go was simply to tell them the
    > proxy settings they need to access the internet. That also gives them
    > the freedom to use browsers other than IE if they feel like it.
    >




  6. Re: How would I modify Windows information via Samba

    Thanks for the reply. Will have to look into the policy settings and their
    use.
    Thanks again

    "Walter Mautner" wrote in message
    news:4vpo53-50s.ln1@woodpecker.fdns.net...
    > Overbey wrote:
    >
    > >
    > > "Overbey" wrote in message
    > > news:n81if.9281$mM2.4736@fe09.lga...
    > >> I have a small network, using squid as the proxy. What I need to do is
    > >> be able to add the proxy information into each users internet
    > >> configuration from the Linux/UNIX side (I do not want to have to log

    onto
    > >> the windows
    > >> boxes). It is possible to do and if so, how.
    > >>

    > ....
    > > I forgot to add I am using Samba 3.0.14a on Red Hat 8. The Samba is

    also
    > > acting as a domain controller.

    >
    > Ok, the less painful way is to configure squid as a transparent proxy and
    > probably block direct outgoing html access on the linux firewall/iptables.
    > That works for any browser.
    > If you must use "regular" proxying, you can do it via policy:
    > For IE, you can use (NT)Config.pol in your netlogon share - IE templates

    are
    > available - to set the proxy globally upon logon.
    > For firefox, you may provide a default profile which includes the
    > appropriate preferences, and add it to each new install. That will affect
    > only new users.




  7. Re: How would I modify Windows information via Samba

    How would I configure the NT Config.pol using a Linux PDC?
    Thanks


    "Walter Mautner" wrote in message
    news:4vpo53-50s.ln1@woodpecker.fdns.net...
    > Overbey wrote:
    >
    > >
    > > "Overbey" wrote in message
    > > news:n81if.9281$mM2.4736@fe09.lga...
    > >> I have a small network, using squid as the proxy. What I need to do is
    > >> be able to add the proxy information into each users internet
    > >> configuration from the Linux/UNIX side (I do not want to have to log

    onto
    > >> the windows
    > >> boxes). It is possible to do and if so, how.
    > >>

    > ....
    > > I forgot to add I am using Samba 3.0.14a on Red Hat 8. The Samba is

    also
    > > acting as a domain controller.

    >
    > Ok, the less painful way is to configure squid as a transparent proxy and
    > probably block direct outgoing html access on the linux firewall/iptables.
    > That works for any browser.
    > If you must use "regular" proxying, you can do it via policy:
    > For IE, you can use (NT)Config.pol in your netlogon share - IE templates

    are
    > available - to set the proxy globally upon logon.
    > For firefox, you may provide a default profile which includes the
    > appropriate preferences, and add it to each new install. That will affect
    > only new users.




  8. Re: How would I modify Windows information via Samba

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Overbey wrote:
    > I have a small network, using squid as the proxy. What I need to do is be
    > able to add the proxy information into each users internet configuration
    > from the Linux/UNIX side (I do not want to have to log onto the windows
    > boxes). It is possible to do and if so, how.


    If you are using Samba as a PDC, and have the "logon script" enabled, then you
    can add your configuration logic to the "logon script" .BAT/.CMD file that Samba
    serves to each user at logon. Since the script can be customized to each user,
    you can have individual per-user Windows configuration commands that will
    execute on the user's desktop (smb client). You might be able use these scripts
    to add the proxy information into the user's desktop.

    FWIW, the Samba help information says this about the smb.conf "logon script" option:

    logon script (G)

    This parameter specifies the batch file (.bat) or NT command file (.cmd) to
    be downloaded and run on a machine when a user successfully logs in. The
    file must contain the DOS style CR/LF line endings. Using a DOS-style editor
    to create the file is recommended.

    The script must be a relative path to the [netlogon] service. If the
    [netlogon] service specifies a path of /usr/local/samba/netlogon , and logon
    script = STARTUP.BAT, then the file that will be downloaded is:

    /usr/local/samba/netlogon/STARTUP.BAT

    The contents of the batch file are entirely your choice. A suggested command
    would be to add NET TIME \\SERVER /SET /YES, to force every machine to
    synchronize clocks with the same time server. Another use would be to add
    NET USE U: \\SERVER\UTILS for commonly used utilities, or NET USE Q:
    \\SERVER\ISO9001_QA for example.

    Note that it is particularly important not to allow write access to the
    [netlogon] share, or to grant users write permission on the batch files in a
    secure environment, as this would allow the batch files to be arbitrarily
    modified and security to be breached.

    This option takes the standard substitutions, allowing you to have separate
    logon scripts for each user or machine.

    This option is only useful if Samba is set up as a logon server.

    Default: no logon script defined

    Example: logon script = scripts\%U.bat


    HTH

    - --
    Lew Pitcher
    IT Specialist, Enterprise Data Systems,
    Enterprise Technology Solutions, TD Bank Financial Group

    (Opinions expressed are my own, not my employers')
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.4 (MingW32)

    iD8DBQFDiwo8agVFX4UWr64RAndAAKClF9XjVg64Y25Xd5EYjr HDnPx00wCgo92s
    IKBvnjmwF282BzdCOoEmKUM=
    =HvPl
    -----END PGP SIGNATURE-----

  9. Re: How would I modify Windows information via Samba

    Overbey wrote:

    > How would I configure the NT Config.pol using a Linux PDC?
    > Thanks
    >

    You will have to do this from a windows client. Define a admin user with
    write access to the netlogon share and use poledit.exe extracted from a W2K
    servicepack.

+ Reply to Thread