[Samba] Re: Domain SID does not match built in domain groups' SIDs...

[Jamrock]

>>Would remapping them correct the SIDs? Can I just >>use a LDAP editor and
>>manually change the SID to what it should be without >>screwing up other
>>things? To my understanding, all the important Samba >>data is stored in
>>LDAP. So I shouldn't have to worry about the >>contents of smbpasswd,
>>secrets.tdb, or anything of that nature, right?

>>Given I can just edit the SIDs, I do know that I may >>have to restart the
>>SMB daemon, rejoin some users to groups, correct >>the local
>>administrators group on workstations, etc. I >>understand the clean up, I
>>don't want to ruin anything else that's not a simple text >>edit or
>>command call.


There is a utility that allows you to change the domain's SID.  Search the
archives and the documentation for "net setlocalsid"