Make Admins be admin users

Andrew Bartlett abartlet at
Thu Feb 20 10:40:20 GMT 2003

On Thu, 2003-02-20 at 21:29, Ken Cross wrote:
> Andrew:
> You've a valid point that the domain isn't checked (although it's
> probably still correct for Enterprise Admins).
> The idea was to do it automatically.  Adding Domain Admins to admin
> users in smb.conf would have the correct results unless somebody forgets
> to do it.  This is especially true if the domain changes.  Hence the
> hack.
> Since we're trying to emulate a Windows environment, Windows admins
> expect to have certain privileges.  Is there a better way to do this
> automatically?

Well, I assume your smb.conf file is automatically generated to some
extent, so just extend that.  (I assume you set 'workgroup' from some
other interface, for example).

However, NT admins do not have 'root' power over their system.  That is
reserved for 'System'.  NT admins have their power due to ACLs and
privileges.  The privileges part is being worked on, but a more limited
hack has been employed by other NAS vendors to give 'change ownership'
permissions.  The rest is up to what ACLs you set on your file system.

Andrew Bartlett

Andrew Bartlett                                 abartlet at
Manager, Authentication Subsystems, Samba Team  abartlet at
Student Network Administrator, Hawker College   abartlet at
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :

More information about the samba-technical mailing list