removing BUILTIN from winbind nested groups ?

Jeremy Allison jra at
Fri Jun 17 17:05:46 GMT 2005

On Thu, Jun 16, 2005 at 01:15:44PM -0500, Gerald (Jerry) Carter wrote:
> The example of BUILTIN\Administrators make it easy to talk
> about. I propose that we automatically add 2 groups here
> at runtime (in memory). First create a new well know RID
> for 'Samba Admins'.  Say 900.  Always add
> LOCAL_SAM_SID-SAMBA_ADMIN_RID to the Administrators group.
> Then, if we are a domain controller or member server,  we
> add 'DOMAIN\Domain Admins' as well.

What UNIX gid does the new well known rid map to ? Or does
this have to be set up by the admin ?


More information about the samba-technical mailing list