James B. Byrne
2020-Aug-06 16:51 UTC
[Samba] Domain admin has no access to C:\Windows\system32\rundll32.exe
FreeBSd-12.1p7 Samba-4.10.15 Windows 10 Pro I have added a windows laptop to the test domain using the domain administrator account. I have logged on to the domain using the domain administrator account. When I attempt to open the Settings->Personalization -> Desktop icon settings I get this error: C:\Windows\system32\rundll32.exe (File version 10.0.18362.1) Windows cannot access the specified device path, or file. You may not have the appropriate permissions to access the item. Checking the security of that file I do not see any mention of the domain to which the computer has been added and logged on to. In security I see: ALL APPLICATION PACKAGES rx r ALL RESTRICTED APPLICATION PACKAGES rx r SYSTEM rx r Administrators (AKL-M01)\Administrators) rx r Users (AKL-M01\Users) rx r TrustedInstaller f m rx r w Ctrl Pnl -> Admin tools -> Comp Mgmt -> Local Users and Groups -> Groups -> Administrators show that BROCKLEY\Domain Admins is a member. So I checked samba and this is what I discovered: [root at smb4-2 ~ (master)]# samba-tool group listmembers "Domain Admins" Administrator Is this telling me that the administrator account name is case sensitive? Any ideas as to what step I missed? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Unencrypted messages have no legal claim to privacy Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB at Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3
Rowland penny
2020-Aug-06 17:14 UTC
[Samba] Domain admin has no access to C:\Windows\system32\rundll32.exe
On 06/08/2020 17:51, James B. Byrne via samba wrote:> FreeBSd-12.1p7 > Samba-4.10.15 > Windows 10 Pro > > I have added a windows laptop to the test domain using the domain administrator > account. I have logged on to the domain using the domain administrator > account. When I attempt to open the Settings->Personalization -> Desktop icon > settings I get this error: > > C:\Windows\system32\rundll32.exe (File version 10.0.18362.1) > Windows cannot access the specified device path, or file. You may not have the > appropriate permissions to access the item. > > Checking the security of that file I do not see any mention of the domain to > which the computer has been added and logged on to. > > In security I see: > > ALL APPLICATION PACKAGES rx r > ALL RESTRICTED APPLICATION PACKAGES rx r > SYSTEM rx r > Administrators (AKL-M01)\Administrators) rx r > Users (AKL-M01\Users) rx r > TrustedInstaller f m rx r w > > Ctrl Pnl -> Admin tools -> Comp Mgmt -> Local Users and Groups -> Groups -> > Administrators show that BROCKLEY\Domain Admins is a member. > > So I checked samba and this is what I discovered: > > [root at smb4-2 ~ (master)]# samba-tool group listmembers "Domain Admins" > Administrator > > Is this telling me that the administrator account name is case sensitive?No, either case will work on Linux. How did you log into the laptop ? did you just log in as 'Administrator' or as 'BROCKLEY\Administrator' ? Rowland