my real problem is ntconfig.pol
EFT.Eric Devolder
eric.devolder at eft.be
Mon Mar 1 13:06:34 GMT 1999
Thank you for this answer, it solves my problem. Also I apologize if I took
some bandwidth to dicuss about an off-topic subject...
Eric
> -----Original Message-----
> From: Mike Brodbelt [SMTP:m.brodbelt at acu.ac.uk]
> Sent: lundi 1 mars 1999 8:44
> To: EFT.Eric Devolder
> Subject: Re: my real problem is ntconfig.pol
>
> EFT.Eric Devolder wrote:
> >
> > Hello,
> >
> > Now I'm sure the ntconfig.pol is *really* downloaded to the NT box.
> >
> > The last problem is always: When logged with samba as PDC on the SAMBA
> > domain, the user of the NT box can no more start or stop services,
> change
> > local user config, and so on. My question is what do I have to
> incorporate
> > into ntconfig.pol in order to allow this behavior ?
> > Do I have to recreate entries in this file for each user and/or machine
> that
> > logs in ? How can I do ? Please help !
>
> This isn't really a Samba issue, it's just the same with an NT server.
> An NT machine has a local SAM database where it stores user accounts. If
> you make a user on the NT box a member of the Administrators group, they
> gain admin rights to the box. The account with these rights will be
> LOCALMACHINE\username. If you then make the machine a member of an NT
> domain, the group DOMAIN\Domain Users will be added to
> LOCALMACHINE\Users, and DOMAIN\Domain Administrators will be added to
> LOCALMACHINE\Administrators.
>
> If you have added user accounts so that the guy who previously logged in
> as LOCALMACHINE\username now logs in as DOMAIN\username, then that
> person will lose Admin rights to the local box, as DOMAIN\username is
> *not* a member of the LOCALMACHINE\Administrators group. To change this,
> run the User Manager on each NT workstation, and add the appropriate
> domain user account to that workstation's local Administrators group.
> This should fix your problem.
>
> HTH
>
> Mike.
More information about the samba-ntdom
mailing list