samba - Mar 2004 - No full administrator-permissions on local machines with samba 3 domain login

hi,

does anybody know about the following situatuion and it's solution ? we 
configured an samba3 as pdc - sure in the way it was often described. but if 
we login on a windowsXP as domainmember (member of the admin group)  it seems 
like we do not really have full administrator-permissions. we can add useres 
and can do some other tasks only an administraor is allowed to do. but some 
stuff is still not possible to do. i.e. we can not disable the 
networkconnection.

thanks for your help.

-- 
J?rn Fenzel

additonaly to my question. we can not add or change usres in the domain if 
we're loged in on a client (as domainadmin sure). and thats wht we want to 
do :-(

thanks
-- 
J?rn Fenzel

When you say domainmember is a member of the admin group, what admin
group do you mean? The admin group as set in the smb.conf or the NT
'Domain Admins' group?

By the details you are describing, it sounds as though it's not the NT
'Domain Admins' group, but just added in smb.conf. I say this because
Samba seems to think you are an admin because it allows you to make
users. If this is the case, you must map the admin group to the NT
'Domain Admins' group using 

net groupmap add......

Now the windows computers should see you their admin, 


Hope this helps

Alex Forrow

-----Original Message-----
From: samba-bounces+alex-mailinglists=forrow.com@lists.samba.org
[mailto:samba-bounces+alex-mailinglists=forrow.com@lists.samba.org] On
Behalf Of Joern Frenzel
Sent: 10 March 2004 10:34
To: samba@lists.samba.org
Subject: [Samba] No full administrator-permissions on local machines
withsamba 3 domain login

hi,

does anybody know about the following situatuion and it's solution ? we 
configured an samba3 as pdc - sure in the way it was often described.
but if 
we login on a windowsXP as domainmember (member of the admin group)  it
seems 
like we do not really have full administrator-permissions. we can add
useres 
and can do some other tasks only an administraor is allowed to do. but
some 
stuff is still not possible to do. i.e. we can not disable the 
networkconnection.

thanks for your help.

-- 
J?rn Fenzel


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba