similar to: Administrators and Users Rights for Windows workstations

Hi, it's simple: 1.) put all users in YOURDOMAIN\Domain Users or YOURDOMAIN\Workstation Admins or what you would like 2.) put this group (YOURDOMAIN\Domain Users, YOURDOMAIN\Workstation Admins) into the local group Administrators of each Workstation (you may use vbscript to automate this...) Mit freundlichem Gru?, Dirk Laurenz Systems Engineer PSO - Professional Service

Hi, we want to give all our users all the rights on the stations, i see 2 solutions : - on the station goto local group administrators and add everyone - on the sation goto local group administrator annd add an LDAP group call UA (created by us with containing all ou users) Which way is the best in term of charge ? Someone told to me that in the first case windows has to handle all the

Hi all, I have a small problem here with Samba (version 1.9.18p7, although I upgraded this morning to p8). The server is a Sun Solaris 2.6. The clients are all Windows NT (server & workstations). All the workstations are on a subnet, and the server on another subnet (so broadcast packets are not able to move from a station to the server), so I configured Samba as a WINS server, and all

Currently, we have a few windows NT4 domains and we are looking to upgrade to samba. I have played with samba on my own and am very comfortable with it. I have implemented pdc and bdc on both samba 2.x and 3.x with an LDAP backend. How do you currently handle adding workstations to the domain. I have done it on my test domain with the root user and by assigning a different password for

Most of my users (unfortunately me included) need to use a bloated, badly designed piece of sh^Hoftware that only works with administrator's rights (I won't say names but it's from a big german company strongly pushing for software patents). How can I assign those users Administrator's rights without phisically going to each machine? I cold put them in the 'Domain

hi list, is it possible with samba v3 and ldap backend to embedd a normal group like "normalgroup" in the group "Domain Administrators" to give members of the group "normalgroup" full administrative rights on workstations? i tried with "net groupmap addmem sid-of-normalgroup sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins

Hi all, On our DC's we use ntp to keep time synced. I've googled a bit on AD and time sync on workstations, and it seems they are supposed to sync their time with the time on the DC. I see however that in our network, this is not occuring: there is a minute time difference between the dc's and my workstation. Is this something that samba has not yet implemented, or is there

On 2015-10-29 12:23, Rowland Penny wrote: > On 29/10/15 09:47, Davor Vusir wrote: >> On 2015-10-29 09:52, Rowland Penny wrote: >>> On 29/10/15 08:34, Davor Vusir wrote: >>>> Hi all! >>>> >>>> We have got many delegations in our AD. To add a certain >>>> administrator group to the local Administrators group you can use

Hi there, I switched servers yesterday. The old server was running 2.2.7a-1 on RedHat 8.0. The new server is 3.0.8-0.pre1.3 on Fedora Core 3. I did the migration by copying the following: /etc/passwd /etc/group /etc/shadow /etc/samba/* I then copied /home and fixed all the permissions on stuff. I then started up samba on the new server, and unplugged the old one. Most everything went

On 2015-10-29 21:32, Rowland Penny wrote: > On 29/10/15 19:38, Davor Vusir wrote: >> >> >> mathias dufresne skrev den 2015-10-29 14:31: >>> I'm thick :D >>> I don't really understand more :( >>> >> >> No. I'm having trouble explaining. Maybe these threads are more >> enlightning: >>

Hello, I'm running FreeBSD-6.1, and Samba 3.0.22 with a Windows XP (SP2) client. As per subject line, administrator doesn't have administrator rights on the workstation. --- 'net groupmap list' gives, Domain Admins (S-1-5-21-3323006203-4037909810-1162086780-3003) -> ntadmins --- 'pdbedit -Lv' includes, Unix username: administrator NT username: Account

Hi, The Problem: I have a samba domain using LDAP as the backend, complete with the IdealX LDAP scripts. Most of my Unix boxes (certainly anything which does any Samba stuff) authenticates against the same LDAP backend, using it for groups and users. I need to grant some people sufficient priviliges to add workstations to the domain, but I don't want to give them the root password in

mathias dufresne skrev den 2015-10-29 14:31: > I'm thick :D > I don't really understand more :( > No. I'm having trouble explaining. Maybe these threads are more enlightning: https://lists.samba.org/archive/samba/2015-April/191020.html and http://www.spinics.net/lists/samba/msg123646.html. > Samba can share file, printers and when samba hosts a domain samba is also

Hello List, I have a samba PDC (3.0.10) in a network with some users still running win98; I would like to restrict the admin rights over their workstations in order to avoid them installing unauthorized programs or changing configs like ip addressing or so. It is possible via the samba PDC or should I to look for a third party program? I will appreciate any comment. Regards,

On 2/17/2016 11:53 AM, Rowland penny wrote: > On 17/02/16 19:47, Ian wrote: >> On 2/17/2016 10:32 AM, Rowland penny wrote: >>> On 17/02/16 18:07, Ian wrote: >>>> Actually, that works for me too. I just issued the command 'chgrp >>>> "BUILTIN\administrators" CoreLib' and it returned successfully for >>>> that >>>>

So, a little bit more investigation shows a problem with idmap -> User - BUILTIN\Administrator uid = 30000 Group - BUILTIN\Administrators gid = 3000000 Group - SAMDOM\Domain Admins gid = 60000 POSIX file ownership is becoming 3000000:60000 It seems that the Administrators group group is set as the owner. What's more, 'Administrators' group name is not mapped when I list the

On 2/17/2016 10:32 AM, Rowland penny wrote: > On 17/02/16 18:07, Ian wrote: >> Actually, that works for me too. I just issued the command 'chgrp >> "BUILTIN\administrators" CoreLib' and it returned successfully for that >> folder. 'ls -la' shows: >> d---------+ 2 MMIA\domain admins BUILTIN\administrators 5 Dec 8 11:59 >> CoreLib//

Hello List, I have tried to grant SeMachineAccountPrivilege to an extra group. Users in this group should not have Admin rights but they should be able to join workstations to the domain. My first try was to grant the right to a single user wich is working as expected. net rpc rights grant "TOPTEST\toptest.r" SeMachineAccountPrivilege -U domainadmin net rpc rights shows:

Sirs: I have a Ubuntu 6.06 samba 3.0.22 file server running on linux. I am attempting to update the file server to ubuntu 8.10, samba 3.2.3. I have been attempting this, intermittently, for some time which is why 8.10. I have 10 MSDOS (mostly 6.22) workstations as a part of the network. The ones that have to run, control production machinery on the plant floor. Updating the operating system on

On 03/11/15 08:10, Davor Vusir wrote: > > > No, Davor. That won't work. The delegated user account is not member > of 'AD\Domain Admins' which is member of the group > 'SERVER\Administrators'. You have to use the username map to be able > to add the first AD-group or account to 'SERVER\Administrators'. > No, Davor, you don't have to use a