samba - Mar 2011 - How to Create Local Administrator Account?

I feel like I'm missing something that must be obvious to everyone else.

My Samba server is integrated into AD, but I can't create local groups.

Following the sequence below results in Access Denied.

Start -> Right Click My Computer -> Manage -> Action -> Connection
to Another
Computer -> FQDN -> Ok -> System Tools -> Local Users and Groups
->  Right Click
Group -> New Group... -> Group Name -> Create

The Samba logs indicate that, of course, my ordinary Windows domain account 
isn't allowed to create local groups on my Samba server.

So:  

a) How do I create a local Administrator account?
a) How do I create a local Administrators group?
b) How do I add my ordinary Windows domain account to the local Administrators 
group?

Jon Hazen wrote:
> The Samba logs indicate that, of course, my ordinary Windows domain
> account
> isn't allowed to create local groups on my Samba server.
> 
> So:
> 
> a) How do I create a local Administrator account?
> a) How do I create a local Administrators group?
> b) How do I add my ordinary Windows domain account to the local
> Administrators
> group?
If you map your Samba groups to the Windows NT groups (although I wouldn't
use the 'root' group like they do in the example)
http://www.samba.org/samba/docs/man/Samba-Guide/small.html#initGrps, add
your domain account to the group you used, you will get Local Admin
privileges when you log on.  Best to set up a separate group and account,
and only use them when you need the extra access.


Moray.
"To err is human; to purr, feline."