On Mon, 12 Dec 2016 10:17:10 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> Am 2016-12-12 um 10:07 schrieb Rowland Penny via samba: > > > Who is 'S-1-5-21-2777655458-4002997014-749295002-1000' and what is > > 'S-1-5-21-2777655458-4002997014-749295002-1006' ? > > # pdbedit -Lv root > Unix username: root > NT username: > Account Flags: [U ] > User SID: S-1-5-21-2777655458-4002997014-749295002-1000 > Primary Group SID: S-1-5-21-2777655458-4002997014-749295002-1006 > > > # net groupmap list > Domain Admins (S-1-5-21-2777655458-4002997014-749295002-1006) -> root > > thanks > >Try removing the mapping between the 'root' group and 'Domain Admins'. The AD user Administrator will be mapped to the 'root' user on the DC and Administrator is automatically made a member of Domain Admins. Rowland
Am 2016-12-12 um 10:41 schrieb Rowland Penny via samba:> Try removing the mapping between the 'root' group and 'Domain Admins'. > The AD user Administrator will be mapped to the 'root' user on the DC > and Administrator is automatically made a member of Domain Admins.Doesn't help, sorry.
Am 2016-12-12 um 10:56 schrieb Stefan G. Weichinger via samba:> Am 2016-12-12 um 10:41 schrieb Rowland Penny via samba: > >> Try removing the mapping between the 'root' group and 'Domain Admins'. >> The AD user Administrator will be mapped to the 'root' user on the DC >> and Administrator is automatically made a member of Domain Admins. > > Doesn't help, sorry.I just moved all the configs etc over to another VM, and started over, looks better now. No clue ... thanks anyway :-)