As it turns out, I've got the same problem with the 3.0.23c .debs (I was using 3.0.14a debian stock). Again, to summarize:
Samba 3 PDC, using LDAPSAM. Group mappings are correct, my domain admins group has privileges: SeMachineAccountPrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Members of the domain admins group can join machines to the domain, but can't rename domain computers (either via netdom or the GUI). XP throws error, "access is denied." Everything else work perfectly. I've filed a bug report, #4116. Does anyone have any ideas? Thanks, Ryan
------------------------------------------------- This email transmission and any documents, files or previous email messages attached to it may contain information that is confidential or legally privileged. If you are not the intended recipient, you are hereby notified that any disclosure, copying, printing, distributing or use of this transmission is strictly prohibited. If you have received this transmission in error, please immediately notify the sender by telephone or return email and delete the original transmission and its attachments without reading or saving in any manner. The Evangelical Lutheran Good Samaritan Society. ---------------------------------------------------------
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
