search for: smb_machin

...ccount Flags: [W ] User SID: S-1-5-21-4211105910-4270789338-3787013593-1414 Primary Group SID: S-1-5-21-4211105910-4270789338-3787013593-513 ..... 'getent passwd agrotera$' gives: agrotera$:x:207:200:SMB Machine:/dev/null:/bin/false where GID 200 is SMB_Machine, which is groupmapped: Domain Computers (S-1-5-21-4211105910-4270789338-3787013593-515) -> \ SMB_MACHINE So... (a) doesn't seem right that the machine account is in 'Domain Users' in the first place. (b) UNIX agrotera$ has primary group that is mapped to 'Doma...

...sers. Group mapping seems OK on each DC. BDC2# net groupmap list Domain Admins (S-1-5-21-xxxxx-xxxxx-512) -> smb_domadmins Domain Users (S-1-5-21-xxxxx-xxxxx-513) -> smb_domusers Domain Guests (S-1-5-21-xxxxx-xxxxx9-514) -> smb_domguests Domain Computers (S-1-5-21-xxxxx-xxxxx-515) -> smb_machines Domain Controllers (S-1-5-21-xxxxx-xxxxx-516) -> smb_dc Domain Certificate Admins (S-1-5-21-xxxxx-xxxxx-517) -> smb_domcertadmins Builtin Admins (S-1-5-21-xxxxx-xxxxx-544) -> smb_admins Builtin users (S-1-5-21-xxxxx-xxxxx-545) -> smb_users Builtin Guests (S-1-5-21-xxxxx-xxxxx-546) -&g...