search for: sediskoperatorprivilege

Hi, I have a samba server setup as a domain member. I am trying to grant SeDiskOperatorPrivilege to some user accounts e.g. "domainaname\User", but I always get the above error. It doesnot matter what I specify as the server in -S option to the command. The command syntax I use is: net rpc rights grant "username" SeDiskOperatorPrivilege OR net -S ADserver -U s...

I have sssd configured and working with my domain member server and I now wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" group. When I execute the command it appears to disregard the domain name and grant the privileges to the group "Unix Group\domain admins" net rpc rights list accounts -U'MYDOMAIN\administrator' Enter MYDOMAIN\administrator's password...

Dear experts, I am having following problem on samba server side . please help me . 1) our device is running with samba server , in order to allow Microsoft windows mmc to change samba share permissions I am giving SeDiskOperatorPrivilege ( net rpc rights grant admin SeDiskOperatorPrivilege) privilege to samba users. This is working fine as long as our device is in standalone work group mode. 2) it is giving the below problem when we move the device to some domain. I am logging into device with domain administrator account...

...rivileges assigned BUILTIN\Backup Operators No privileges assigned BUILTIN\Server Operators No privileges assigned BUILTIN\Administrators SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeCreatePagefilePrivilege SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUnd...

...migrate services. The MIT / openldap and samba4 AD servers are on different machines. My script (based on LPHvB's instructions) sets privileges in the following way: [..] systemctl restart bind9 ntp samba-ad-dc sleep 5 SAMBA_DC_ADMIN_GROUP_CHOICE="BUILTIN\Administrators" PRIVS="SeDiskOperatorPrivilege SeTakeOwnershipPrivilege \ SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege \ SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege \ SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege \ SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege \...

...id file rights MS terminals can see shares on this server. But giving this privilege fails with a bit random results. [me at server]$ getent group "DOMAIN\Domain Admins" domain admins:*:978600512:me.user,administrator [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server Enter DOMAIN\Administrator's password: Could not connect to server server Connection failed: NT_STATUS_LOCK_NOT_GRANTED [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server.domain.local...

...ix, works just like any other Unix > user or group and only has the permissions you assign to them. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > When a now try to set SeDiskOperatorPrivilege to "DOMAIN\Domain Admins" it is set for "Unix Group\domain admins"? Is this correct as I had expected it to be "DOMAIN\Domain Admins"? root at aphrodite:~# net rpc rights grant 'DOMAIN\Domain Admins' SeDiskOperatorPrivilege -U'DOMAIN\administrator' Ent...

On 20 January 2016 at 06:43, Rowland penny <rpenny at samba.org> wrote: > On 19/01/16 19:34, Henry McLaughlin wrote: > >> I have sssd configured and working with my domain member server and I now >> wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" >> group. When I execute the command it appears to disregard the domain name >> and grant the privileges to the group "Unix Group\domain admins" >> >> net rpc rights list accounts -U'MYDOMAIN\administrator' >>...

I am having trouble giving the Domain Admin group the 'SeDiskOperatorPrivilege' privilege on a member server. Running 'net rpc rights list accounts -UAdministrator' Results in this: Enter Administrator's password: BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned BUILTIN\Backup Operators No privileges assigned...

Hello, I've been setting up new file server using samba 4.8.3 (centos 7 RPM), as samba 4 AD member server using my earlier smb.conf when I realised that I was  previously somewhat circumventing the SeDiskOperatorPrivilege by using "admin users map" to SAMDOM\Domain admins" parameter in smb.conf. I decided to change my smb.conf and setup shares following samba wiki. All shares are going to be used strictly by windows clients (AD domain members), so I've followed closely samba wiki. I granted b...

...r smb server. People can login to the share using their AD credentials and when I run getent group "NSD\Domain Admins”, it returns a list of people. So I know it’s talking to the AD server ok. The problem is when I run the following command: net rpc rights grant "NSD\Domain Admins" SeDiskOperatorPrivilege -U "NSD\Administrator" It asks me to the domain admin password Enter NSD\Administrator's password: I enter the password and I get this in response: Failed to grant privileges for NSD\Domain Admins (NT_STATUS_NO_SUCH_USER) I’ve added what I need to, to fstab UUID=fd1a97e7-28ea-4df8-9e...

...t giving this >> privilege fails with a bit random results. >> >> [me at server]$ getent group "DOMAIN\Domain Admins" >> domain admins:*:978600512:me.user,administrator >> >> [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >> SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server >> Enter DOMAIN\Administrator's password: >> Could not connect to server server >> Connection failed: NT_STATUS_LOCK_NOT_GRANTED >> >> [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >> SeDiskOperatorPri...

I switched to rid module of idmapping and now winbind offers all groups and I can set SeDiskOperatorPrivilege. getent group and getent passwd are now working! Am 9. Januar 2015 15:21:32 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 13:47, Tim wrote: >> Hello all, >> >> I have a AD DC based on CentOS7 with sernet samba 4.1.14 with rfc2307 >and fu...

...smb.conf (realm etc is configured to my needs. I joined the AD and configured nsswitch. wbinfo works so far but getent passwd or getent group doesn't list domain objects. getent group testgroup1 works, but getent passwd testuser1 does not. I created a share in smb.conf. Now I want to set the SeDiskOperatorPrivilege like the wiki advises. But it doesn't work. It says that it can't connect to server 127.0.0.1. I tried it with net rpc rights grant 'DOM\Domain Admins' SeDiskOperatorPrivilege -U'DOM\administrator' Now I can not access the server from windows to set share permissions. What...

...t random results. >>>> >>>> [me at server]$ getent group "DOMAIN\Domain Admins" >>>> domain admins:*:978600512:me.user,administrator >>>> >>>> [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >>>> SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server >>>> Enter DOMAIN\Administrator's password: >>>> Could not connect to server server >>>> Connection failed: NT_STATUS_LOCK_NOT_GRANTED >>>> >>>> [me at server]$ net rpc rights grant "DOMAIN\Domain...

...rivileges assigned BUILTIN\Backup Operators No privileges assigned BUILTIN\Server Operators No privileges assigned BUILTIN\Administrators SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeCreatePagefilePrivilege SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUnd...

I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect the german umlauts: # wbinfo -g dom�nencomputer dom�nen-benutzer dom�nen-g�ste dom�nen-admins (bad locale, umlauts displayed as special ugly chars) but the group "domänen-admins" = "Domain Admins" is there. now: # net rpc rights grant "CUSTO...

...efully correctly). I think I just misread documentation on wiki, but I would really appreciate a clarification. In the wiki it states: "To enable other accounts than the domain administrator to set permissions on Windows, grant |Full control| (|rwx|) to the user or group you granted the |SeDiskOperatorPrivilege| privilege." Does the "domain administrator" mean EXACTLY the default "Administrator" user, or should I understand it as "any member of Domain Admins group"? If it's the former, than there is no issue (I can change share ACL from windows client using Admin...

...can see shares on this server. But giving this >privilege fails with a bit random results. > >[me at server]$ getent group "DOMAIN\Domain Admins" >domain admins:*:978600512:me.user,administrator > >[me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server >Enter DOMAIN\Administrator's password: >Could not connect to server server >Connection failed: NT_STATUS_LOCK_NOT_GRANTED > >[me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >SeDiskOperatorPrivilege -UDOMAIN\\Administrato...

...Unix user or group and only has the permissions you assign > to them. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > > > When a now try to set SeDiskOperatorPrivilege to "DOMAIN\Domain > Admins" it is set for "Unix Group\domain admins"? Is this correct as I > had expected it to be "DOMAIN\Domain Admins"? > > root at aphrodite:~# net rpc rights grant 'DOMAIN\Domain Admins' > SeDiskOperatorPrivilege -U'DO...