samba - May 2010 - net rpc rights grant root SeDiskOperatorPrivilege failed with "Failed to grant privileges for root (NT_STATUS_ACCESS_DENIED)"

Hi,

 

I have a samba server setup as a domain member.  I am trying to grant
SeDiskOperatorPrivilege to some user accounts e.g. "domainaname\User",
but I always get the above error.  It doesnot matter what I specify as
the server in -S option to the command.  The command syntax I use is:

 

net rpc rights grant "username" SeDiskOperatorPrivilege

 

OR

 

net -S ADserver -U support rpc rights grant 'domain\Administrator'
SeDiskOperatorPrivilege

 

I am trying to grant the above privilege because managing samba shares
through mmc from remote windows system is failing with:

 

_srvsvc_NetShareSetInfo: uid 10500 doesn't have the
SeDiskOperatorPrivilege privilege needed to modify share myshare

 

 

Uid 10500 is 'domain\Administrator' account

 

I can send the relevant smb.conf and any additional traces I need to
capture.  Can anyone provide ideas on what could be going wrong?  The
above feature(s) is supposed to be supported by samba 3.5.1 which I am
using.

 

Thanks for the help.

 

-s

You need to tell net with which user you run the command:

net rpc rights grant USERNAME SeDiskOperatorPrivilege -Uroot

HTH,
Norberto

El 13/05/2010 9:53, "Nagaraj Shyam" <Nagaraj_Shyam at
symantec.com> escribi?:

Hi,



I have a samba server setup as a domain member.  I am trying to grant
SeDiskOperatorPrivilege to some user accounts e.g. "domainaname\User",
but I always get the above error.  It doesnot matter what I specify as
the server in -S option to the command.  The command syntax I use is:



net rpc rights grant "username" SeDiskOperatorPrivilege



OR



net -S ADserver -U support rpc rights grant 'domain\Administrator'
SeDiskOperatorPrivilege



I am trying to grant the above privilege because managing samba shares
through mmc from remote windows system is failing with:



_srvsvc_NetShareSetInfo: uid 10500 doesn't have the
SeDiskOperatorPrivilege privilege needed to modify share myshare





Uid 10500 is 'domain\Administrator' account



I can send the relevant smb.conf and any additional traces I need to
capture.  Can anyone provide ideas on what could be going wrong?  The
above feature(s) is supposed to be supported by samba 3.5.1 which I am
using.



Thanks for the help.



-s

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba