Goutham
asked on
samba domain controller and users login profile
Dear Experts:
Recently installed suse linux enterprise 11 and configured as samba domain controller with the ldap as password backend, now the in the LAN desktops and laptops are members or clients of windows 2003 AD.
My requirements:
Disjoin all the desktops and laptops from the Windows AD and join to the suse linux enterprise 11 samba domain controllers. But keeping their Documents and Settings of their local system as it is as msoutlook and data is available on their desktop and mydocuments .
Existing profile windows AD of all the users are of local profile as we have disabled the roaming profile due to the bandwidth consumption.
Now iam looking for the solution like retaining their local profile intact without any changes but join them to suse linux enterprise samba pdc for this have created the user names same as windows AD user accounts.
Please help me how to achieve this also is this recommended or creating the new profile is recomenede. Please help. Thanks in advance.
Recently installed suse linux enterprise 11 and configured as samba domain controller with the ldap as password backend, now the in the LAN desktops and laptops are members or clients of windows 2003 AD.
My requirements:
Disjoin all the desktops and laptops from the Windows AD and join to the suse linux enterprise 11 samba domain controllers. But keeping their Documents and Settings of their local system as it is as msoutlook and data is available on their desktop and mydocuments .
Existing profile windows AD of all the users are of local profile as we have disabled the roaming profile due to the bandwidth consumption.
Now iam looking for the solution like retaining their local profile intact without any changes but join them to suse linux enterprise samba pdc for this have created the user names same as windows AD user accounts.
Please help me how to achieve this also is this recommended or creating the new profile is recomenede. Please help. Thanks in advance.
ASKER
Thanks for the reply, can you please provide me good how to dos to acheive this.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ldif can perhaps import the accounts, but that's probably the easy part (creating the accounts..). More of a pain will be migrating the user profiles because they will have to be migrated. Keeping the names the same will not help at all. You could try ADMT to migrate the profile, or you can just copy the My Docs, Desktop, Favourites to the new folder, or you can try to attach the new user account to the existing profile although this sometimes causes pain with permissions to the files.
How many users are you looking at doing this for?
what is the reason? I would seriously question why someone would migrate from Windows AD to Samba...sure it'll work but Samba is always behind in trying to add the features already present in AD. Especially If you have a multi-site domain I would really recommend against this....
How many users are you looking at doing this for?
what is the reason? I would seriously question why someone would migrate from Windows AD to Samba...sure it'll work but Samba is always behind in trying to add the features already present in AD. Especially If you have a multi-site domain I would really recommend against this....
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You have to carefully make a list of all the existing feature that active directory is providing. You would implement each into LDAP server and see whether every features translates or not using Samba.
Next phase, after implementing would be testing using some dummy system. Do as through testing as you can. The "disjoin" would be the last step when you have tested and figured out how everything would work. Make sure you know how to revert back if something doesn't work