samba - Jan 2018 - Administrator account lost administrative privileges

Hello,

     Using Samba 4.7.4 on 6 Ubuntu 14.04 as DC's. Recently noticed 
applications were failing to install on Windows 10 and 7 workstations. 
Started to investigate and noticed the Administrator account could not 
install software.  The Domain Admins appear to work as normal with full 
domain rights. As a test I logged in to a Windows 10 workstation as 
Administrator and invoked a command prompt with 'Run as Administrator'. 
Attempted to run 'ipconfig /registerdns' I get the prompt about needing 
to run with administrative privileges.

Not entirely sure where to start to see if this is a Samba or Windows 
issue. Anyone have a list of what group memberships the Administrator 
should be a part of by default? Thanks.



-- 
--
James

On Tue, 23 Jan 2018 08:20:28 -0500
lingpanda101 via samba <samba at lists.samba.org> wrote:
> Hello,
> 
>      Using Samba 4.7.4 on 6 Ubuntu 14.04 as DC's. Recently noticed 
> applications were failing to install on Windows 10 and 7
> workstations. Started to investigate and noticed the Administrator
> account could not install software.  The Domain Admins appear to work
> as normal with full domain rights. As a test I logged in to a Windows
> 10 workstation as Administrator and invoked a command prompt with
> 'Run as Administrator'. Attempted to run 'ipconfig
/registerdns' I
> get the prompt about needing to run with administrative privileges.
> 
> Not entirely sure where to start to see if this is a Samba or Windows 
> issue. Anyone have a list of what group memberships the Administrator 
> should be a part of by default? Thanks.
> 
> 
> 
On my DC, Administrator is a member of:

Domain Admins, Administrators, Enterprise Admins, Group Policy Creator
Owners, Schema Admins

Have you checked if Administrator is disabled on the affected machines,
or if its password has expired ?

Rowland

On 1/23/2018 8:37 AM, Rowland Penny via samba wrote:
> On Tue, 23 Jan 2018 08:20:28 -0500
> lingpanda101 via samba <samba at lists.samba.org> wrote:
>
>> Hello,
>>
>>       Using Samba 4.7.4 on 6 Ubuntu 14.04 as DC's. Recently noticed
>> applications were failing to install on Windows 10 and 7
>> workstations. Started to investigate and noticed the Administrator
>> account could not install software.  The Domain Admins appear to work
>> as normal with full domain rights. As a test I logged in to a Windows
>> 10 workstation as Administrator and invoked a command prompt with
>> 'Run as Administrator'. Attempted to run 'ipconfig
/registerdns' I
>> get the prompt about needing to run with administrative privileges.
>>
>> Not entirely sure where to start to see if this is a Samba or Windows
>> issue. Anyone have a list of what group memberships the Administrator
>> should be a part of by default? Thanks.
>>
>>
>>
> On my DC, Administrator is a member of:
>
> Domain Admins, Administrators, Enterprise Admins, Group Policy Creator
> Owners, Schema Admins
>
> Have you checked if Administrator is disabled on the affected machines,
> or if its password has expired ?
>
> Rowland
>
>
>
Thanks. That solved it. Administrator was not part of Domain Admins any 
longer.

-- 
--
James