similar to: rpcclient setdriver fails with WERR_ACCESS_DENIED

On Mon, 7 Oct 2024 22:46:36 +0200 Peter Koch via samba <samba at lists.samba.org> wrote: > Dear Samba-experts, > > I'm trying to setup automatic printer download with our > samba 4.19.4 fileserver which is a domain member of > our samba 4.18.2 AD. > > printer drivers have been installed on the fileserver: > > root at serv00:# rpcclient -Uprtadmin%pass1

Hi Rowland, Thanks very much for your quick response. > Have you tried the command with a member of Domain Admins instead of > Administrator ? I just did and I now feel that something is wrong with our Administrator-account. Granting the SePrintOperatorPrivilege to user NAV\prtadmin with user NAV\Administator failes on our fileserver (INVALID PASSWORD). Granting the

On Tue, 8 Oct 2024 14:58:11 +0200 Peter Koch via samba <samba at lists.samba.org> wrote: > Hi Rowland, > > Thanks very much for your quick response. > > > Have you tried the command with a member of Domain Admins instead of > > Administrator ? > > I just did and I now feel that something is wrong with > our Administrator-account. Probably not.

Dear samba experts, I did a classic upgrade from a Samba 3.6.14 samba NT4 DC to a Samba 4.18.2 AD-DC. It does not work and I just want to make sure that I have the correct understanding of our domain SID. On our old Samba server net getdomainsid shows: SID for local machine SERV00 is: S-1-5-21-1415314133-2460755331-2761616138 SID for domain NAV is: S-1-5-21-1415314133-2460755331-2761616138

sorry , the original message was in error. Follow: Hi. Sorry. Today I have a big problem with the samba I can not solve! My permissions do not work properly. in the RSAT created groups, OU and users. I configured in Windows the shared directory *TECNOLOGIA* security settings assigning full permissions to *grupo_tecnologia* (technology group). However users who are with *grupo_tecnologia*

How does one create all of the builtin groups for this release? When using tdbsam with previous releases one would automatically get such groups as: System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-1832519723-2688400599-3493754984-512) -> domadmin Domain Guests (S-1-5-21-1832519723-2688400599-3493754984-514)

I'm sorry, you're absolutely right. I'm not sure why I didn't follow your hint. My fault. Now, it seems I have exactly the same output as you: [root at dc private]# net rpc rights list accounts -U Administrator Enter Administrator's password: BUILTIN\Print Operators SeLoadDriverPrivilege SeShutdownPrivilege SeInteractiveLogonRight BUILTIN\Account Operators

Dear readers we are using Dovecot 2.2.7 and all of our users are using Thunderbird as their mail client. Some of them additionally use their iPad/iPhone and a very few an Android Mail-Client. Now one user noticed that two of his mail folders disappeared. He first believed that he accidentally deleted those folders but then he realized that they are still visible from his iPad. I checked this

Hi, I'm trying to upload printer drivers to my jessie samba 4.1.17 print server, but I'm getting: "Failed to add driver. Access denied", and I don't understand why. The domain join is OK (verified with net ads testjoin) and on the DC I have given the SePrintOperatorPrivilege to the Domain Admins group, of which I am a member: root at DC2:~# net rpc rights list

I've cleared all DNS records (indeed, they were still there). I'm not sure if that was the issue, cause I've discovered that the real problem is related to insufficient Administrator rights. I was able to join that DC to domain using credentials of my second user (member of domain admins group). The first one had to get out from Domain admins. Can this be related to fixing the

Did you add that user to the "domain admins" or an other group. If an other group, did you set the SePrivileges for that group so its allowed to edit the registry. The "domain admins" group for me has all privileges. Just tried it out, and no problem here with user Administrator. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces

Hello Admins, We serve printing to XP clients with Samba 3.0.4 and CUPS 1.1.20 I get the following error when trying to issue this command: xprint-admin:/home/suarezry# rpcclient localhost -N -U'username%password' -c 'setdriver oa-e108-e2 oa-e108-e2' result was WERR_ACCESS_DENIED <snip> 000018 spoolss_io_r_open_printer_ex 000018 smb_io_pol_hnd printer handle

Hi all, I'm getting WERR_ACCESS_DENIED error for some of the printers when running setdriver printer_name printer_driver as part of the cupsaddsmb step. Weirdly, it works for some printers, and never works for others, while all the printers have the same settings. Samba 3.5.20 with CUPS 1.5.4. Does this part of log give any clue of why could this happen? function print_access_check() --

Hi, I'm using samba 3.0.22 on a Linux/Debian machine. I'm trying to get printer drivers on the server automatically picked by the XP clients on the server. $ rpcclient localhost -U flavien -c 'enumdrivers' Password: [Windows NT x86] Printer Driver Info 1: Driver Name: [hp1] The user "flavien" has PrintOperator privileges : $ net rpc

Have been running samba successfully authenticating to a windows 2003 domain since 3.0.1. Starting in 3.0.23 and 3.0.23b I can't do a "net ads join" on a HPUX itanium server running 11.23 ia64. I can kinit just fine w/ this userid. Samba was built with gcc 4.1.1. See below: root@serv00 # kinit jjurich_wa Password for jjurich_wa@DIVMS.UIOWA.EDU: root@serv00 #

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Message: 2 > Date: Tue, 19 Aug 2003 14:05:40 +0200 > From: samba-list@naev.de (Peter Koch) > Subject: [Samba] Samba creates User-ACL's > To: samba@lists.samba.org > Message-ID: <200308191205.OAA02625@intranet.naev.de> > > Dear Readers: > > I'm using Samba 2.2.8a with ACL-support and noticed the >

Hi list, After kudos, time comes again with problems. This time, still on the same setup as before : - Linux PDC with ldapsam, ran by RH9, OpenLDAP 2.0.27 (stock RH9 RPM+Solaris RootDSE patch), Samba 3.0.1rc1 recompiled from SRPM ; - Linux BDC is the same ; The PDC and BDC are working Ok, so I won't include the smb.conf from these. - Solaris 9 domain member (jersey) gets Posix accounts

Hi, we have tested Samba 3.0.0 and 3.0.1 with LDAP-Support (--with-ldap) on Solaris 8 and it worked fine. The machine authenticates against an OpenLDAP server. Patch 108993-23 is applied and we use native Sun LDAP client modules. On Solaris 9 we ran into problems with secondary groups. Users cannot access files if the rights are based on a secondary group and if this information is stored on

Guys, I have a pc (already joinned the samba domain 'DOMAIN') that I want to keep off other domain users but user DOMAIN\mark and DOMAIN\thomas whilst letting both of them to logon freely to other computers. I tried sambaUsersWorkstations but it only works with uid (Users not Computers) and it dictated which computer such a user may logon to. What I want is the opposite: which users may

Am 04.08.2016 um 17:11 schrieb lingpanda101 at gmail.com: > On 8/4/2016 10:11 AM, nanocosm at gmail.com wrote: >> Hi, >> >> I've a Samba 4.4.5 AD DC working fine. >> But when I try to create a GPO on "Computer Configuration>Policies> >> Windows Settings>Security Settings>Local Policies>User Rights >> Assignment>Allow Logon