removing BUILTIN from winbind nested groups ?
jra at samba.org
Fri Jun 17 17:05:46 GMT 2005
On Thu, Jun 16, 2005 at 01:15:44PM -0500, Gerald (Jerry) Carter wrote:
> The example of BUILTIN\Administrators make it easy to talk
> about. I propose that we automatically add 2 groups here
> at runtime (in memory). First create a new well know RID
> for 'Samba Admins'. Say 900. Always add
> LOCAL_SAM_SID-SAMBA_ADMIN_RID to the Administrators group.
> Then, if we are a domain controller or member server, we
> add 'DOMAIN\Domain Admins' as well.
What UNIX gid does the new well known rid map to ? Or does
this have to be set up by the admin ?
More information about the samba-technical