mirror of
https://github.com/samba-team/samba.git
synced 2024-12-27 03:21:53 +03:00
8f8a9f0190
(This used to be commit 9f672c26d6
)
52 lines
2.0 KiB
XML
52 lines
2.0 KiB
XML
<samba:parameter name="logon script"
|
|
context="G"
|
|
advanced="1" developer="1"
|
|
type="string"
|
|
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
|
|
<description>
|
|
<para>
|
|
This parameter specifies the batch file (<filename>.bat</filename>) or NT command file
|
|
(<filename>.cmd</filename>) to be downloaded and run on a machine when a user successfully logs in. The file
|
|
must contain the DOS style CR/LF line endings. Using a DOS-style editor to create the file is recommended.
|
|
</para>
|
|
|
|
<para>
|
|
The script must be a relative path to the <smbconfsection name="[netlogon]"/> service. If the [netlogon]
|
|
service specifies a <smbconfoption name="path"/> of <filename
|
|
moreinfo="none">/usr/local/samba/netlogon</filename>, and <smbconfoption name="logon
|
|
script">STARTUP.BAT</smbconfoption>, then the file that will be downloaded is:
|
|
<programlisting>
|
|
/usr/local/samba/netlogon/STARTUP.BAT
|
|
</programlisting>
|
|
</para>
|
|
|
|
<para>
|
|
The contents of the batch file are entirely your choice. A suggested command would be to add <command
|
|
moreinfo="none">NET TIME \\SERVER /SET /YES</command>, to force every machine to synchronize clocks with the
|
|
same time server. Another use would be to add <command moreinfo="none">NET USE U: \\SERVER\UTILS</command>
|
|
for commonly used utilities, or
|
|
<programlisting>
|
|
<userinput>NET USE Q: \\SERVER\ISO9001_QA</userinput>
|
|
</programlisting>
|
|
for example.
|
|
</para>
|
|
|
|
<para>
|
|
Note that it is particularly important not to allow write access to the [netlogon] share, or to grant users
|
|
write permission on the batch files in a secure environment, as this would allow the batch files to be
|
|
arbitrarily modified and security to be breached.
|
|
</para>
|
|
|
|
<para>
|
|
This option takes the standard substitutions, allowing you to have separate logon scripts for each user or
|
|
machine.
|
|
</para>
|
|
|
|
<para>
|
|
This option is only useful if Samba is set up as a logon server.
|
|
</para>
|
|
</description>
|
|
<value type="default"></value>
|
|
<value type="example">scripts\%U.bat</value>
|
|
</samba:parameter>
|