search for: sediskoperatorpriveleg

...are also using it wrong, it should (in my opinion) only map Administrator to root, not spurious users to root. > However when I did that I did get some errors not being able to read > to the security tab (because user1 was mapping to root???), I had to > use a second account (user2) with sediskoperatorpriveleges, for > things to work. (Perhaps I should have removed user.map?) No, just use it correctly. > > As I type I am extremely conscious I could be wrong and demonstrating > my ignorance, which causes further embarrassment to me. I am not a > "linux" person but am called on...

Its littered throughout the docs eg.. https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs At best its *poor practice* which should not be frowned upon, but it just shows a real disconnect with real world users and systems, where admins are not "Domain Admins".