I have successfully setup a PDC with Samba and logon scripts are
working as documented, but...
I have a Perl script that creates customized logon scripts for each
user and the last thing it does is making the BAT files 0644 to
prevent local users from changing them. Unfortunately, after a user
has logged onto one of the workstations, the file becomes 0666, thus
opening a potential hole where someone could change the contents of
the script and have it executed if the user logs onto more than one ws
at the same time (or use it to escape quota restrictions, but this is,
ehr, quite artistic).
Any idea of why the perms are changing? Is it samba or windows? But
then again why should windows make it rw since it won't touch that
file again for the whole session?
TIA for all help,