I've had similar problems before, make sure you don't have any unix group mapped to multiple Windows groups.

Like having

Domain users -> users
Staff users -> users

Eric Feldhusen

Brian May wrote:
"Steve" == Steve A <[EMAIL PROTECTED]> writes:

    Steve> Hello, I'm running FreeBSD-6.1, and Samba 3.0.22 with a
    Steve> Windows XP (SP2) client.

    Steve> As per subject line, administrator doesn't have
    Steve> administrator rights on the workstation.

Hmmm. I noticed the similar thing on my system.

I also noticed, as discussed here, that the RID for my Domain Admins
group was wrong.

However I still have issues, even after fixing the RID as discussed in
this thread.

Just to clarify: Does belonging to the "Domains Admins" group mean you
should automatically get full administrator rights when logged onto
any computer?

Also, what is the difference between the terms "RID" and "SID"?


sam:~# net groupmap list
...
Domain Admins (S-1-5-21-1268321594-3481289969-4150125466-512) -> Domain Admins

sam:~# pdbedit  -Lv administrator
...
Unix username:        administrator
NT username:          administrator
Account Flags:        [UX         ]
User SID:             S-1-5-21-1268321594-3481289969-4150125466-21104
Primary Group SID:    S-1-5-21-1268321594-3481289969-4150125466-512
Full Name:            Domain Administrator
Home Directory:       \\sam\administrator
HomeDir Drive:        U:
Logon Script:         logon.cmd
Profile Path: Domain: VPAC Account desc: Workstations: Munged dial: Logon time: 0
Logoff time:          Tue, 19 Jan 2038 14:14:07 EST
Kickoff time:         Tue, 19 Jan 2038 14:14:07 EST
Password last set:    Mon, 03 Jul 2006 10:33:32 EST
Password can change:  0
Password must change: Tue, 19 Jan 2038 14:14:07 EST
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to