samba - Jun 2019 - How to fix mapping Administrator to root

On 05/06/2019 08:37, adam_xu at adagene.com.cn wrote:
> Hi Rowland ,
>
> I used to manage file or folder permissions using administrator 
> account in Windows Client. So how could I do this task if the 
> administrator can't do this after I mapped it to root in fileserver 
> and remove it's uidNumber in ADUC? should I create another user in 
> Domain Adams"?
>
You can log into a Windows computer as 'DOMAIN\Administrator' and then 
set the permissions on a Samba share, but you must create the share 
correctly, you cannot have any of the old parameters such as 'valid 
users' etc, see here:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

This should work, if it doesn't , you probably have something set up 
incorrectly, so double check everything

Rowland

Hi Rowland,

 I can manage the security permission, but I can't manage the share
permission after I remove the user "everyone"'s share permission
and add "domain admins" and "domain user" share permission.
Do you have any advice?

Best,


yours Adam
 
From: Rowland penny via samba
Date: 2019-06-05 15:53
To: sambalist
Subject: Re: [Samba] How to fix mapping Administrator to root
On 05/06/2019 08:37, adam_xu at adagene.com.cn wrote:
> Hi Rowland ,
>
> I used to manage file or folder permissions using administrator 
> account in Windows Client. So how could I do this task if the 
> administrator can't do this after I mapped it to root in fileserver 
> and remove it's uidNumber in ADUC? should I create another user in 
> Domain Adams"?
>
You can log into a Windows computer as 'DOMAIN\Administrator' and then 
set the permissions on a Samba share, but you must create the share 
correctly, you cannot have any of the old parameters such as 'valid 
users' etc, see here:
 
https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
 
This should work, if it doesn't , you probably have something set up 
incorrectly, so double check everything
 
Rowland
 
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On 05/06/2019 09:08, adam_xu at adagene.com.cn wrote:
> Hi Rowland,
>
>  I can manage the security permission, but I can't manage the share 
> permission after I remove the user "everyone"'s share
permission and
> add "domain admins" and "domain user" share permission.
> Do you have any advice?
>
I take it you are referring to the 'security' and 'share' tabs
here, if
so, then IGNORE the 'share' tab, do not touch it, forget it is there.

A better name for the 'security' tab would be 'NTFS
permissions', this
is the tab to check/change.

Rowland