Privileges NT and Samba

[Rafał Szcześniak]

1.
"DOMAIN\Unknown account" is normal under Samba 2.0.7 because
it doesn't support user/group enumeration.

2. If you need user with admin rights you need to create or select one 
group
to act as Domain Admins group. Name of this group (unix name) assign
to "domain admin group" param in smb.conf. Then add your admin user
to previously selected/created unix group and it should work. Of course,
you can also directly add unix user name to "domain admin users".

If you still don't have admin rights, try to add (on NT wks) "Domain 
Admins"
group into (local) "Administrators" group. Some Samba users noticed, that 
this
helps, though I didn't need that.


greetings,
rafal





Dolgopolov Sergey <virgo at azcher.kharkov.ua>
Sent by: samba-ntdom-admin at us4.samba.org
00-10-18 11:35

 
        To:     "samba-ntdom at us4.samba.org" <samba-ntdom at us4.samba.org>, 
"samba-ntdom-request at us4.samba.org" <samba-ntdom-request at us4.samba.org>, 
"samba-request at us4.samba.org" <samba-request at us4.samba.org>
        cc: 
        Subject:        Privileges NT and Samba


Hi respected.
There is a question. Is created on samba-2.0.7 PDC.
The user goes into from NT4, but the problem in that that this user has
no any rights.
I launch net time \\ server /set /yes writes
System error 1314 has occurred.
A required privilege is not held by the client.
Clearly that the privilegess for the client is not present.
A question: how to place the privilegess for the user live in samba?
In User Manager for NT the user of the bootstrap domain is written as \\
DOMAIN\unknown account user.
Beforehand is grateful for the answer.
Yours faithfully.

Sergey.
Registered Linux User  #186627