dded further comment.

(This used to be commit 094726d84d08a83dcce8e1b96c3b3623ef9f7382)

diff --git a/docs/textdocs/CreatingGroupProfiles-Win2K.txt b/docs/textdocs/CreatingGroupProfiles-Win2K.txt
index 61d12aa724828e3c4776368f79f03b3b9214ac4d..31af9c2305829ea0a0c7c6e9fd7710b1c2bd01f8 100644 (file)
--- a/docs/textdocs/CreatingGroupProfiles-Win2K.txt
+++ b/docs/textdocs/CreatingGroupProfiles-Win2K.txt
@@ -30,3 +30,15 @@ nominated.
 Done. You now have a profile that can be editted using the samba-3.0.0
 profiles tool.
 
+
+
+> Keep profiles clean and small by making them mandatory.
+> See the Win2K/WinXP resource kits for details how to create a mandatory profile.
+>
+> Can you do this when using Samba as a PDC?  I thought you could only do
+> policies if you had a Win2K server?
+
+No difference. Samba handles the profile ACLs the same way Win2K does.
+But understand that it is the Win2K client that does all the processing
+of the SIDs on the ACLs in the profile NTUser.DAT file.
+