"Alex Brett"
We currently do not have the correct permissions on the file shares as most of them were originally setup by Tiny who installed the server and they just set Everyone Full Control. We have been going through fixing it but not got very far! He wants Win2K because we are having problems with Win2K Workstations connecting properly on to the network - it might just be a policy thing rather than a server thing - i'm not sure.
Be clever with linux permissions - use features like SGUID (chmod 2xxx folder) and also your smb.conf settings for the share: force group = pupils This will mean that you can then assign permissions to selected groups with considerable ease. Check that the users are also members of additional groups as appropriate. Hey presto. RE: hiding shares from view ... Make sure the shares on the linux box (apart from netlogon) are marked browseable = no They do not then show in the output of net view or the windows explorer etc. netlogon is a special case, which must be left browseable, or all your clever policy thingies wont be found correctly. Incidentally, you do not *have* to put them in netlogon. You can make a new share, whose name *can* end in a $, leaving the share effectively hidden. You then need to update the registry on the work stations to do a *manual* download of the policy (look in the default machine settings via policy editor, after electing to view the registry). Ensure this holds the UNC path to the config.pol file (including the file name), e.g. \\server\hidden$\config.pol. Leave error checking on until you have got it working. If you need more info, I can probably go more into chapter and verse. Andrew Ray ***********************************************************************- ********* E-Mail Address: aray@computerpark.co.uk Tel: +44 (0) 1536 417155 Fax: +44 (0) 1536 417566 Computer Park Ltd Broughton Grange Headlands Kettering Northamptonshire NN15 6XA ***********************************************************************- *********