[Samba] How Is Administrator Treated?

[Les Bell]

"Andreas S. Haramasz" <aharamas at optonline.net> wrote:

>>
edit /etc/passwd and change UID 604 to 1 for Administrator (Windows uses 0
for super user on Unix it is 1).
<<

Uh-uh: now that I *am* sure about - root on Unix is 0, while on Windows the
domain Administrator is SID -500 (and the Domain Administrators group is
-512).

>>
Also, your life is easier if you don't have
Administrator on Unix instead add root=Administrator in the smbusers file.
<<

Yes, I thought about this approach. But now, if you log in as
Administrator,and smb.conf has "logon drive = H:", will you get /root
mapped to your H: drive? That scares me.

What I'm looking for here is a *definitively* correct way to deal with the
Administrator logon. If it's not just right, it seems to cause trouble with
administering workstations, setting up policies, etc. but I've never seen
it written up anywhere.

Best,

--- Les Bell, RHCE, CISSP
[http://www.lesbell.com.au]