my real problem is ntconfig.pol

[EFT.Eric Devolder]

Okay. Perhaps do I ommit to say some things:
- For historical reasons, each user had already an account on their machine,
but not registered in any domain. (local account). I've created network
accounts with the same name. That is perhaps why I get this problem.
In fact, if I log on the local domain, (ont on SAMBA but on NT WS own
domain), and if I execute this command, NT says to me that the username is
already part of Administrators group. (what is coherent with what I said in
the previous mail).

But now if I log onto the SAMBA domain, and if I try to launch this command,
NT disagrees with error code 5. 

and if I try to perform "net user XXX /DOMAIN", it crashes ne1.exe on my NT
box...



> -----Original Message-----
> From:	Gerald Carter [SMTP:cartegw at eng.auburn.edu]
> Sent:	vendredi 26 février 1999 15:30
> To:	EFT.Eric Devolder
> Subject:	Re: my real problem is ntconfig.pol
> 
> EFT.Eric Devolder wrote:
> > 
> > You are right! but here each developer has its own NT Box. 
> > Of course, they need to be constantly logged with 
> > administrator right. And they work alone on their machines.
> > But when I perform a NT logging, the user can no more have 
> > this local administrator right, and I really don't know 
> > how to do it, as the user is not defined on the local 
> > machine but on the Unix Box. However, when logged
> > as network user, the User manager tool is viewable 
> > only. (what we could expect).
> 
> On the NT client, execute
> 
> 	net localgroup Administrators <username> /add
> 
> where <username> is the name of the domain account.  This
> assumes that users have personal boxes that they consistently 
> use.
> 
> > In your response, you say "right associated with an 
> > account". How can I change this ? Is it in the policy 
> > editor ?
> 
> Rights and policies are two separate issues.
> 
> > But then perhaps do I have to create special groups / 
> > users in the polices in order to achieve this ?
> 
> Nope. See above comments.
> 
> > This confuses me a lot ! Perhaps it's not a samba 
> > stright-forward related issue, but if you can help me, 
> > or indicate me where I can find this info...
> 
> Truthfully, this is strictly an NT related issue.  However,
> lately this list has been more of a "how to administer 
> Windows NT" type list.
> 
> 
> 
> Hope this helps,
> jerry
> ________________________________________________________________________
>                             Gerald ( Jerry ) Carter	
> Engineering Network Services                           Auburn University 
> jerry at eng.auburn.edu             http://www.eng.auburn.edu/users/cartegw
> 
>        "...a hundred billion castaways looking for a home."
>                                   - Sting "Message in a Bottle" ( 1979 )