[Samba] Windows ACLs : problems

Rowland penny
Mon, 24 Feb 2020 09:34:25 -0000

On 24/02/2020 08:52, Stefan G. Weichinger via samba
wrote:
> Status:
>
> domain member server, Samba version 4.10.11-Debian
>
>
> 	username map = /etc/samba/samba_usermapping

I take it that samba_usermapping contains something like this:

!root = CUSTOMER\Administrator

> The share "QM" gives us issues when we edit ACLs via RSAT on
windows DC.
>
> access denied
>
> Folder is owned by
>
> administrator:10513
>
So why does 'administrator' own the share and not root ?

If 'Administrator' is used on a Unix domain member, then
'Administrator'
will only be like any other Unix user and will only be able to do what a
normal user can.

Change the owner to 'root' and never use Administrator on a Unix domain
member.

Rowland