# Note: --- prepare WinXP Pro for domain login ---
# use Window's Group Policy Editor (gpedit.msc) to make the following changes
# in the Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
#    Disable: Domain member: Digitally encrypt or sign secure channel data
#    Disable: Domain member: Digitally sign secure channel data (when possible)
# reboot, and log on as Administrator. open cmd, and type in
#    NET USE * /DELETE /YES
# then join the domain, and log into it with user "root".
# see http://hr.uoregon.edu/davidrl/samba/samba-pdc.html#joining
# On XP with SP1 or higher, you might need to set the following as well:
# in Computer Configuration\Administrative Templates\System\User Profiles
# enable "Do not check for user ownership of Roaming Profile Folders"