samba - Aug 2020 - Domain admin has no access to C:\Windows\system32\rundll32.exe

FreeBSd-12.1p7
Samba-4.10.15
Windows 10 Pro

I have added a windows laptop to the test domain using the domain administrator
account.  I have logged on to the domain using the domain administrator
account.  When I attempt to open the Settings->Personalization -> Desktop
icon
settings I get this error:

C:\Windows\system32\rundll32.exe  (File version 10.0.18362.1)
Windows cannot access the specified device path, or file. You may not have the
appropriate permissions to access the item.

Checking the security of that file I do not see any mention of the domain to
which the computer has been added and logged on to.

In security I see:

ALL APPLICATION PACKAGES  rx r
ALL RESTRICTED APPLICATION PACKAGES rx r
SYSTEM rx r
Administrators (AKL-M01)\Administrators) rx r
Users (AKL-M01\Users) rx r
TrustedInstaller f m rx r w

Ctrl Pnl -> Admin tools -> Comp Mgmt -> Local Users and Groups ->
Groups ->
Administrators show that BROCKLEY\Domain Admins is a member.

So I checked samba and this is what I discovered:

[root at smb4-2 ~ (master)]# samba-tool group listmembers "Domain
Admins"
Administrator

Is this telling me that the administrator account name is case sensitive?

Any ideas as to what step I missed?

-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

On 06/08/2020 17:51, James B. Byrne via samba wrote:
> FreeBSd-12.1p7
> Samba-4.10.15
> Windows 10 Pro
>
> I have added a windows laptop to the test domain using the domain
administrator
> account.  I have logged on to the domain using the domain administrator
> account.  When I attempt to open the Settings->Personalization ->
Desktop icon
> settings I get this error:
>
> C:\Windows\system32\rundll32.exe  (File version 10.0.18362.1)
> Windows cannot access the specified device path, or file. You may not have
the
> appropriate permissions to access the item.
>
> Checking the security of that file I do not see any mention of the domain
to
> which the computer has been added and logged on to.
>
> In security I see:
>
> ALL APPLICATION PACKAGES  rx r
> ALL RESTRICTED APPLICATION PACKAGES rx r
> SYSTEM rx r
> Administrators (AKL-M01)\Administrators) rx r
> Users (AKL-M01\Users) rx r
> TrustedInstaller f m rx r w
>
> Ctrl Pnl -> Admin tools -> Comp Mgmt -> Local Users and Groups
-> Groups ->
> Administrators show that BROCKLEY\Domain Admins is a member.
>
> So I checked samba and this is what I discovered:
>
> [root at smb4-2 ~ (master)]# samba-tool group listmembers "Domain
Admins"
> Administrator
>
> Is this telling me that the administrator account name is case sensitive?
No, either case will work on Linux.

How did you log into the laptop ?

did you just log in as 'Administrator' or as
'BROCKLEY\Administrator' ?

Rowland