This wiki page is still effective? https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting#SeDiskOperatorPrivilege_can't_be_set seems to me that a user that is (directly or indirectly) member of BULTIN\Administrators, so particulary 'SAMDOM\Domain Admins', have just SeDiskOperatorPrivilege on all the shares... I think that mapping Admnistrator to root is still a good idea and does not harm, but... it is still needed? Thanks. --
On Mon, 10 Nov 2025 13:06:56 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote:> > This wiki page is still effective? > > https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting#SeDiskOperatorPrivilege_can't_be_set > > seems to me that a user that is (directly or indirectly) member of > BULTIN\Administrators, so particulary 'SAMDOM\Domain Admins', have > just SeDiskOperatorPrivilege on all the shares...That is correct, you do not have to set that privilege on users that are members of Domain Admins.> > I think that mapping Admnistrator to root is still a good idea and > does not harm, but... it is still needed?Not from my testing, Administrator gets its permissions (and hence the SeDiskOperatorPrivilege) from being a member of the Administrators group. I haven't set the 'min domain uid' parameter in the smb.conf file, or given any user the SeDiskOperatorPrivilege, for quite sometime. Rowland
Yes in order to interact with the ?share permissions? tab of the share, when configuring from ?Computer manager?. (Not security tab) I think this is the only time when it?s needed, this was discovered not too long ago, trough a thread in the list. See: http://samba.bigbird.es/doku.php?id=samba:server-privileges On Nov 10, 2025 at 14:10 +0000, Marco Gaiarin <gaio at lilliput.linux.it>, wrote:> > I think that mapping Admnistrator to root is still a good idea and does not > harm, but... it is still needed?