samba - May 2011 - Can I write to wondows folder

Hi!I have Samba 3.2.5 as PDC for 20 users with windws XP now I need that 5 users
can write into C:\windows folder from each machine in my LAN. I have a
Administrators group with RID 544 and i added these users to this group but it
doesnt work, I did the same adding to Domain Admin and didnt .
There is a something way to give to these users access to can write into this
folder
Thks.
*-------------------------------------------------------* 
*-Edwin Quijada 
*-Developer DataBase 
*-JQ Microsistemas 

*-Soporte PostgreSQL

*-www.jqmicrosistemas.com
*-809-849-8087
*-------------------------------------------------------*

I am not sure if the Administrators group is required on the PDC-  any 
way it would be a group specific to the PDC.

Making domain users members of the "Domain Administrators" group
should
have worked.   When an XP machine joins the domain , the "Domain
Users"
group should be added automatically the the local Administrators group 
on that PC-  and by extension those users will have local admin rights.

If you log into the PC as the domain Administrator, can you write into 
C:\Windows?  Can you even create a local user account?   This would 
verify that the domain Administrator really had local administrator 
rights.  I had one issue after upgrading one of my domain controllers 
where the group mapping wasn't working properly-  so on the Windows 
systems using that DC,  any permissions assigned to Domain Admins or 
Domain Users was didn't work since the users weren't seen in the groups.






On 05/24/2011 02:07 PM, Edwin Quijada wrote:
>
> Hi!I have Samba 3.2.5 as PDC for 20 users with windws XP now I need that 5
users can write into C:\windows folder from each machine in my LAN. I have a
Administrators group with RID 544 and i added these users to this group but it
doesnt work, I did the same adding to Domain Admin and didnt .
> There is a something way to give to these users access to can write into
this folder
> Thks.
> *-------------------------------------------------------*
> *-Edwin Quijada
> *-Developer DataBase
> *-JQ Microsistemas
>
> *-Soporte PostgreSQL
>
> *-www.jqmicrosistemas.com
> *-809-849-8087
> *-------------------------------------------------------*
>
>
>
>

I added user to "Domain Admins" and nothing. I have a group named
Administrators with 544 I suposed that is the local administartor but nothing.I
have other user adminnew and it can write into this folder as Administartor
domain too.I think when I create a user and move this user into this group
nothing happens. I have the user equijada and see thisWe can write into the
folder but these users can add users/machines to my domain and it can
be.debian-pdc:/var/lib/samba/netlogon# id adminnewuid=1002(adminnuevo)
gid=513(Domain Users) grupos=512(Domain Admins),513(Domain
Users)debian-pdc:/var/lib/samba/netlogon# id equijadauid=1006(equijada)
gid=512(Domain Admins) grupos=64238(domadm),512(Domain Admins)Both belong to
domain admins but just andminnew can write into WiNDOWS/ always, but now
something more weird happens now equijada can too.really, I dont know why this
behaviour for example groups domadm was erased and it tells that exist. I am
using ldapadmin.exe to mamage users and groups maybe will be the app??
*-------------------------------------------------------* 
*-Edwin Quijada 
*-Developer DataBase 
*-JQ Microsistemas 

*-Soporte PostgreSQL

*-www.jqmicrosistemas.com
*-809-849-8087
*-------------------------------------------------------*




> Date: Wed, 25 May 2011 15:02:13 -0400
> From: gaiseric.vandal at gmail.com
> To: samba at lists.samba.org
> Subject: Re: [Samba] Can I write to wondows folder
> 
> I am not sure if the Administrators group is required on the PDC-  any 
> way it would be a group specific to the PDC.
> 
> Making domain users members of the "Domain Administrators" group
should
> have worked.   When an XP machine joins the domain , the "Domain
Users"
> group should be added automatically the the local Administrators group 
> on that PC-  and by extension those users will have local admin rights.
> I added user to "Domain Admins" and nothing. I have a group named
Administrators with 544 I suposed that is the local administartor but nothing.I
have other user adminnew and it can write into this folder as Administartor
domain too.
I think when I create a user and move this user into this group nothing happens.
I have the user equijada and see this
We can write into the folder but these users can add users/machines to my domain
and it can be.

debian-pdc:/var/lib/samba/netlogon# id adminnewuid=1002(adminnuevo)
gid=513(Domain Users) grupos=512(Domain Admins),513(Domain Users)
debian-pdc:/var/lib/samba/netlogon# id equijadauid=1006(equijada) gid=512(Domain
Admins) grupos=64238(domadm),512(Domain Admins)
Both belong to domain admins but just andminnew can write into WiNDOWS/ always,
but now something more weird happens now equijada can too.
really, I dont know why this behaviour for example groups domadm was erased and
it tells that exist. I am using ldapadmin.exe to mamage users and groups maybe
will be the app??