NT, 2.0.6 PDC and User Groups

[Heiko Kaschube]

Hello, Folks!

We have got Samba 2.0.6 (S.u.S.E. 6.4) as a PDC for Win95 and WinNT4 SP5
boxes. Everything works fine except one thing:

When I log on to an NT box as a normal user, not a member of "domain
admin group" (see parameter in global section of smb.conf), I am not
able to change any of registry entries, not even those belonging to
normal users. 

To get around this, I set domain admin group to @users.

[global]
          workgroup = PINNEBERG
          netbios name = GONZO
          netbios aliases = PDCPI TIMESRVPI3
          server string = Gonzo Samba %v
          interfaces = eth0
          encrypt passwords = Yes
          update encrypted = Yes
          map to guest = Bad User
          passwd program = /usr/bin/passwd %u && (cd /var/yp; make)
          passwd chat = *ew*assword* %n\n *ew*assword* %n\n *changed*
          unix password sync = Yes
          time server = Yes
          keepalive = 30
          socket options = TCP_NODELAY SO_KEEPALIVE=1 SO_SNDBUF=2048
          domain admin group = @users
          logon script = %U.bat
          logon path = \\%L\%U\profildaten
          logon drive = P:
          logon home = \\%L\%U
          domain logons = Yes
          os level = 65
          preferred master = Yes
          domain master = Yes
          kernel oplocks = No


So how do I maintain at least one normal "domain user group"?



Greetings, Heiko


---
Heiko Kaschube
Hoedtke Blech- und Lasertechnik
Phone: +49 4101 7099-0
FAX: +49 4101 76137
email:    mailto:H.Kaschube at hoedtke.de
Internet: http://www.hoedtke.de