search for: seloaddriverprivileg

I'm sorry, you're absolutely right. I'm not sure why I didn't follow your hint. My fault. Now, it seems I have exactly the same output as you: [root at dc private]# net rpc rights list accounts -U Administrator Enter Administrator's password: BUILTIN\Print Operators SeLoadDriverPrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Account Operators SeInteractiveLogonRight BUILTIN\Backup Operators SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Administrators SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemtimePri...

...cessfull on the AD-machine: root at ns1:# net -U 'administrator%pass2' rpc rights grant prtadmin SePrintOperatorPrivilege Successfully granted rights. root at ns1:# net -U 'administrator%pass2' rpc rights list accounts NAV\prtadmin SePrintOperatorPrivilege BUILTIN\Print Operators SeLoadDriverPrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Account Operators SeInteractiveLogonRight BUILTIN\Backup Operators SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Administrators SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemtimePri...

I've cleared all DNS records (indeed, they were still there). I'm not sure if that was the issue, cause I've discovered that the real problem is related to insufficient Administrator rights. I was able to join that DC to domain using credentials of my second user (member of domain admins group). The first one had to get out from Domain admins. Can this be related to fixing the

Did you add that user to the "domain admins" or an other group. If an other group, did you set the SePrivileges for that group so its allowed to edit the registry. The "domain admins" group for me has all privileges. Just tried it out, and no problem here with user Administrator. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces

...ivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeCreatePagefilePrivilege SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUndockPrivilege SeManageVolumePrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege SeEnableDelegationPrivilege Everyone No privileges assigned root at aphrodite:/# getent passwd administrator administrator:*:1904600...

...t -U 'administrator%pass2' rpc rights grant prtadmin > SePrintOperatorPrivilege > Successfully granted rights. > > root at ns1:# net -U 'administrator%pass2' rpc rights list accounts > NAV\prtadmin > SePrintOperatorPrivilege > > BUILTIN\Print Operators > SeLoadDriverPrivilege > SeShutdownPrivilege > SeInteractiveLogonRight > > BUILTIN\Account Operators > SeInteractiveLogonRight > > BUILTIN\Backup Operators > SeBackupPrivilege > SeRestorePrivilege > SeShutdownPrivilege > SeInteractiveLogonRight > > BUILTIN\Administrators > Se...

...RemoteShutdownPrivilege \ SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege \ SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege \ SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege \ SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege \ SeLoadDriverPrivilege SeCreatePagefilePrivilege \ SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUndockPrivilege \ SeManageVolumePrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege \ SeEnableDelegationPrivilege" samba-tool user setpassword Administrator \ --newpassword="$SAMBA_NT_ADMIN_PASS"...

...dable = true krb4_convert = false } [domain_realm] .ROPA.INTRANET = ROPA.INTRANET .ROPA = ROPA.INTRANET .ROPA.intranet = ROPA.INTRANET [root at smb ~]# net rpc rights list accounts -Uadministrator Enter administrator's password: ROPA\Domain Admins SeDiskOperatorPrivilege BUILTIN\Print Operators SeLoadDriverPrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Account Operators SeInteractiveLogonRight BUILTIN\Backup Operators SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Administrators SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemtimePrivil...

...ts grant prtadmin > > SePrintOperatorPrivilege > > Successfully granted rights. > > > > root at ns1:# net -U 'administrator%pass2' rpc rights list accounts > > NAV\prtadmin > > SePrintOperatorPrivilege > > > > BUILTIN\Print Operators > > SeLoadDriverPrivilege > > SeShutdownPrivilege > > SeInteractiveLogonRight > > > > BUILTIN\Account Operators > > SeInteractiveLogonRight > > > > BUILTIN\Backup Operators > > SeBackupPrivilege > > SeRestorePrivilege > > SeShutdownPrivilege > > SeInteractiv...

...pdate process (samba-tool dbcheck --cross-ncs --fix)? How to check > admin's privileges? > > That's the first problem. Try: net rpc rights list accounts -U Administrator It should ask you for the Administrator password and then print something like this: BUILTIN\Print Operators SeLoadDriverPrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Account Operators SeInteractiveLogonRight BUILTIN\Backup Operators SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Administrators SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemtimePri...

...[ 10]: SeShutdownPrivilege > Privilege[ 11]: SeDebugPrivilege > Privilege[ 12]: SeSystemEnvironmentPrivilege > Privilege[ 13]: SeSystemProfilePrivilege > Privilege[ 14]: SeProfileSingleProcessPrivilege > Privilege[ 15]: SeIncreaseBasePriorityPrivilege > Privilege[ 16]: SeLoadDriverPrivilege > Privilege[ 17]: SeCreatePagefilePrivilege > Privilege[ 18]: SeIncreaseQuotaPrivilege > Privilege[ 19]: SeChangeNotifyPrivilege > Privilege[ 20]: SeUndockPrivilege > Privilege[ 21]: SeManageVolumePrivilege > Privilege[ 22]: SeImpersonatePrivilege > Privilege[ 23...

...onnect Network Registry we couldnt add or remove anything to "HKEY_LOCAL_MACHINE\SYSTEM\Cu rrentControlSet\Control\Print\Printers" could you please help us to find what is missing? # net rpc rights list accounts -Uadministrator Enter administrator's password: BUILTIN\Print Operators SeLoadDriverPrivilege SeShutdownPrivilege SeInteractiveLogonRight SePrintOperatorPrivilege BUILTIN\Account Operators SeInteractiveLogonRight FACILITY\btombul SePrintOperatorPrivilege BUILTIN\Backup Operators SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeInteractiveLogonRight FACILITY\Domain Admins SePr...

...understand why. The domain join is OK (verified with net ads testjoin) and on the DC I have given the SePrintOperatorPrivilege to the Domain Admins group, of which I am a member: root at DC2:~# net rpc rights list accounts -Umy-username Enter my-username's password: BUILTIN\Print Operators SeLoadDriverPrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Account Operators SeInteractiveLogonRight OUR-WKGR\Domain Admins SePrintOperatorPrivilege SeDiskOperatorPrivilege ... However, on my print server only the BUILTIN groups are shown, no OUR-WKGR. Perhaps this is expected, but trying to grand S...

...e SeAddUsersPrivilege SeDiskOperatorPrivilege <<<<<<<<<<<< hum-m-m SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeCreatePagefilePrivilege SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUndockPrivilege SeManageVolumePrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege SeEnableDelegationPrivilege Everyone No privileges assigned root at dtmember01:~# net rpc rights grant 'DTDC01Domain Admins'...

...11]: SeDebugPrivilege >>> Privilege[ 12]: SeSystemEnvironmentPrivilege >>> Privilege[ 13]: SeSystemProfilePrivilege >>> Privilege[ 14]: SeProfileSingleProcessPrivilege >>> Privilege[ 15]: SeIncreaseBasePriorityPrivilege >>> Privilege[ 16]: SeLoadDriverPrivilege >>> Privilege[ 17]: SeCreatePagefilePrivilege >>> Privilege[ 18]: SeIncreaseQuotaPrivilege >>> Privilege[ 19]: SeChangeNotifyPrivilege >>> Privilege[ 20]: SeUndockPrivilege >>> Privilege[ 21]: SeManageVolumePrivilege >>> Privi...

...ivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeCreatePagefilePrivilege SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUndockPrivilege SeManageVolumePrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege SeEnableDelegationPrivilege Everyone No privileges assigned But, running 'net rpc rights grant HOME\\Domain\ Admins SeDiskOpera...

...ratorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege \ >> SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege \ >> SeDebugPrivilege SeSystemEnvironmentPrivilege >> SeSystemProfilePrivilege \ SeProfileSingleProcessPrivilege >> SeIncreaseBasePriorityPrivilege \ SeLoadDriverPrivilege >> SeCreatePagefilePrivilege \ SeIncreaseQuotaPrivilege >> SeChangeNotifyPrivilege SeUndockPrivilege \ SeManageVolumePrivilege >> SeImpersonatePrivilege SeCreateGlobalPrivilege \ >> SeEnableDelegationPrivilege" >> >> samba-tool user setpassword Administrato...

...ivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeCreatePagefilePrivilege SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUndockPrivilege SeManageVolumePrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege SeEnableDelegationPrivilege Everyone No privileges assigned Unix Group\domain admins SeDiskOperatorPrivilege

Did you try it with the administrator account? If it is also not working have a look right here: https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting Am 15. Februar 2015 07:15:23 MEZ, schrieb Jason Long <hack3rcon at yahoo.com>: > > > >Thank you. > >According to the "

...} [domain_realm] .ROPA.INTRANET = ROPA.INTRANET .ROPA = ROPA.INTRANET .ROPA.intranet = ROPA.INTRANET *[root at smb ~]# net rpc rights list accounts -Uadministrator* Enter administrator's password: ROPA\Domain Admins SeDiskOperatorPrivilege BUILTIN\Print Operators SeLoadDriverPrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Account Operators SeInteractiveLogonRight BUILTIN\Backup Operators SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Administrators SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemtimePri...