I have a problem that im not too sure if its a samba issue or something else. I am in the process of converting my Win2k server to a samba server. The restrictions on the machines here are really lose and we allow the users to install onto their machines... the only thing that they arent allowed to do is any of the the admin type things, such as adding users, etc. My problem is that none of the normal users (ones that arent listed in the domain admin group) are able to install anything or change other things. I thought that it might have to do with NT groups, but by everything that I have seen, Samba 2.2.3 doesnt really have NT groups. Does anyone have any ideas on how to fix this? Thanks in advance.
> I have a problem that im not too sure if its a samba issue or somethingelse. I am in the process of> converting my Win2k server to a samba server. The restrictions on themachines here are really lose and we > allow the users to install onto their machines... the only thing that they arent allowed to do is any of> the the admin type things, such as adding users, etc. My problem is thatnone of the normal users (ones> that arent listed in the domain admin group) are able to install anythingor change other things. I> thought that it might have to do with NT groups, but by everything that Ihave seen, Samba 2.2.3 doesnt> really have NT groups. Does anyone have any ideas on how to fix this?Peter, What I understand from your description is that you have the users setup on your current Win2k server (PDC?)as local administrators ("... we allow the users to install onto their machines ..."). If you want the same privileges for them on your Samba-controlled domain you would have to create a similar group on that new domain controller. Another possible scenario could be that you have changed the local policy on each NT/W2k workstation to give users additional privileges. In this case you would have to do the same modifications for the users of the new domain. You didn't specify which kind of security you were using previously, e.g. was that Win2k server a domain controller for your workstations, or was the security maintained on each machine individually with local accounts? Thomas
You should be able to add the domain user account (that is on the Samba server) into a local group that has the permissions that you want. On a Win2K client there is a 'Power Users' group that would do what you want. On NT you can create a similar account. -- Brian ----- Original Message ----- From: "Peter Erickson" <redlamb@redlamb.net> To: "Samba List" <samba@lists.samba.org> Sent: Wednesday, April 03, 2002 1:07 PM Subject: [Samba] User problems with Samba 2.2.3> I have a problem that im not too sure if its a samba issue or somethingelse. I am in the process of converting my Win2k server to a samba server. The restrictions on the machines here are really lose and we allow the users to install onto their machines... the only thing that they arent allowed to do is any of the the admin type things, such as adding users, etc. My problem is that none of the normal users (ones that arent listed in the domain admin group) are able to install anything or change other things. I thought that it might have to do with NT groups, but by everything that I have seen, Samba 2.2.3 doesnt really have NT groups. Does anyone have any ideas on how to fix this?> > Thanks in advance. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >