lingpanda101
2018-Jan-23 13:20 UTC
[Samba] Administrator account lost administrative privileges
Hello, Using Samba 4.7.4 on 6 Ubuntu 14.04 as DC's. Recently noticed applications were failing to install on Windows 10 and 7 workstations. Started to investigate and noticed the Administrator account could not install software. The Domain Admins appear to work as normal with full domain rights. As a test I logged in to a Windows 10 workstation as Administrator and invoked a command prompt with 'Run as Administrator'. Attempted to run 'ipconfig /registerdns' I get the prompt about needing to run with administrative privileges. Not entirely sure where to start to see if this is a Samba or Windows issue. Anyone have a list of what group memberships the Administrator should be a part of by default? Thanks. -- -- James
Rowland Penny
2018-Jan-23 13:37 UTC
[Samba] Administrator account lost administrative privileges
On Tue, 23 Jan 2018 08:20:28 -0500 lingpanda101 via samba <samba at lists.samba.org> wrote:> Hello, > > Using Samba 4.7.4 on 6 Ubuntu 14.04 as DC's. Recently noticed > applications were failing to install on Windows 10 and 7 > workstations. Started to investigate and noticed the Administrator > account could not install software. The Domain Admins appear to work > as normal with full domain rights. As a test I logged in to a Windows > 10 workstation as Administrator and invoked a command prompt with > 'Run as Administrator'. Attempted to run 'ipconfig /registerdns' I > get the prompt about needing to run with administrative privileges. > > Not entirely sure where to start to see if this is a Samba or Windows > issue. Anyone have a list of what group memberships the Administrator > should be a part of by default? Thanks. > > >On my DC, Administrator is a member of: Domain Admins, Administrators, Enterprise Admins, Group Policy Creator Owners, Schema Admins Have you checked if Administrator is disabled on the affected machines, or if its password has expired ? Rowland
lingpanda101
2018-Jan-23 15:26 UTC
[Samba] Administrator account lost administrative privileges
On 1/23/2018 8:37 AM, Rowland Penny via samba wrote:> On Tue, 23 Jan 2018 08:20:28 -0500 > lingpanda101 via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> Using Samba 4.7.4 on 6 Ubuntu 14.04 as DC's. Recently noticed >> applications were failing to install on Windows 10 and 7 >> workstations. Started to investigate and noticed the Administrator >> account could not install software. The Domain Admins appear to work >> as normal with full domain rights. As a test I logged in to a Windows >> 10 workstation as Administrator and invoked a command prompt with >> 'Run as Administrator'. Attempted to run 'ipconfig /registerdns' I >> get the prompt about needing to run with administrative privileges. >> >> Not entirely sure where to start to see if this is a Samba or Windows >> issue. Anyone have a list of what group memberships the Administrator >> should be a part of by default? Thanks. >> >> >> > On my DC, Administrator is a member of: > > Domain Admins, Administrators, Enterprise Admins, Group Policy Creator > Owners, Schema Admins > > Have you checked if Administrator is disabled on the affected machines, > or if its password has expired ? > > Rowland > > >Thanks. That solved it. Administrator was not part of Domain Admins any longer. -- -- James