Roaming profiles in ns7 Active Directory

Just configured roaming profiles with Nethserver:

Login as root into SSH, enter following command (substitute with your domain):

mkdir /var/lib/nethserver/profiles
chown "administrator@<domain>" /var/lib/nethserver/profiles
chgrp "domain admins@<domain>" /var/lib/nethserver/profiles
chmod 777 /var/lib/nethserver/profiles

(I don’t like giving full access to “others”, but it does not work without this. If anyony knows how this could be avoided, please tell me so)

mkdir -p /etc/e-smith/templates-custom/etc/samba/smb.conf
vi /etc/e-smith/templates-custom/etc/samba/smb.conf/71profiles

Put this in the new file:


[profiles]
comment = Profiles directory
browsable = no
path = /var/lib/nethserver/profiles
read only = no
store dos attributes = Yes
create mask = 0600
directory mask = 0700
profile acls = yes
csc policy = disable

Do a samba update

signal-event nethserver-samba-update

Now set the profile path (separate for each user or for many users at the same time) via Microsoft RSAT-Tools in the “Active Directory Users and Computers > Profile > User Profile > Profile Path” to

\\<hostname>\profiles\%USERNAME%

Don’t forget to substitute with the host name of the server.
Or set the profile path as a group policy (via Microsoft RSAT-Tools, group policy editor) "Computer Configuration > Policies > Administrative Templates > System > User Profiles > “Set roaming profile path for all users…” to

\\<hostname>\profiles\%USERNAME%

But this is done for all users on the computer. Even the local users (not domain users). Don’t forget to update policy before testing (gpupdate /force in DOS box).

Now roaming profiles are working.

Maybe the NethServer part can be configured via the web interface in the future (I’m not yet so deep inside NethServer to do this).

9 Likes