Hi All, I have a tdbsam backend on Samba PDC and am trying to set a user up as a domain admin. I read that instead of the old admin users line in smb.conf you now use net groupmap to map unix groups to NT groups. I have a user called toni in unix group admins and have run: net groupmap add rid=512 ntgroup="Domain Admins" unixgroup=admins running: net groupmap list gives: Domain Admins (S-1-5-21-2201139836-2091317229-5964732158-512) -> admins which is the correct sid for the domain, but doing domain admin like things, e.g. gpedit, changing network settings etc., on an XP client leads to warnings that toni is not an administrator. Is there something I've missed? Setup is Centos 5.1, Samba 3.0.25 and smbusers maps root to administrators. Thanks, Jools
you still have to grant toni priviliges. http://us1.samba.org/samba/docs/man/Samba-Guide/happy.html#id353033 Julian Pilfold-Bagwell wrote:> Hi All, > > I have a tdbsam backend on Samba PDC and am trying to set a user up as a > domain admin. I read that instead of the old admin users line in > smb.conf you now use net groupmap to map unix groups to NT groups. > > I have a user called toni in unix group admins and have run: > > net groupmap add rid=512 ntgroup="Domain Admins" unixgroup=admins > > running: > > net groupmap list gives: > > Domain Admins (S-1-5-21-2201139836-2091317229-5964732158-512) -> admins > > which is the correct sid for the domain, but doing domain admin like > things, e.g. gpedit, changing network settings etc., on an XP client > leads to warnings that toni is not an administrator. > > Is there something I've missed? Setup is Centos 5.1, Samba 3.0.25 and > smbusers maps root to administrators. > > Thanks, > > Jools > >