Samba3 + Windows7/Win2008Server: Domain Membership
==================================================

For joining the SKOLELINUX Samba3 domain with Win7 or Win2008Server clients
please add the provided registry patch as is to your Win7/Win2008Server system:

   Win7_Samba3DomainMember.reg

and then let the client join the SKOLELINUX Samba3 domain.

The registry patch file also contains some optimizations for Win7 networking.


Disable UAC (optional, non-default)
===================================
The registry patch also contains registry key fix that disables 
Win7's UAC (user access control). For Debian Edu we have disabled UAC.
If you want to keep it enabled on your Win7 clients that make
sure to comment the appropriate lines in Win7_Samba3DomainMember.reg.

Also make sure no user (not even you, the sysadmin) works with Administrators'
rights on Windows machines permanently. Malicious software that intrudes a Windows
client always gains the privileges of the logged in user, thus you want to make sure
that logged in users always have reduced privileges on the Windows client.


Playing in the registry patch
=============================
For playing in the registry patch (and also for domain joining), you of course
need Administrators' rights on the Windows client (and an account in the
Samba/SKOLELINUX domain that has the privilege to add machines to a domain).


Windows 7 hotfix for joining a Samba3 domain:
=============================================
To avoid receiving a confusing error about DNS problems of the kind...

"""
Changing the Primary Domain DNS name of this computer to "" failed.
The name will remain "<MYDOM>".  The error was:

The specified domain either does not exist or could not be contacted.
"""

... make sure you have the MS hotfix installed described by this article
http://support.microsoft.com/kb/2171571/en-us


Debian Edu Project Team, 20110905
