Delegation of permissions

Marc Muehlfeld Marc.Muehlfeld at
Wed Oct 10 06:26:10 MDT 2012


I wanted to ask, what the current state is of delegating permissions on 
samba4. I tried delegating GPO editing, user/group management and allow to 
bring computers into the domain. All seem not to work (or I do something wrong).

I saw that samba-tool has a delegation option, but don't know how to use it. I 
only tried it with ADUC.

For adding computers to the domain I already opened a bugreport 
( with logfiles, etc.

Should delegation already work? And if, for what parts of AD? If not, is it 
planned for s4 final? I mean: Like many companies, we don't want everyone in 
the helpdesk to know the domain admin password just for e. g. bringing a new 
workstation into the domain. :-)


Marc Muehlfeld (IT-Leiter)
Zentrum fuer Humangenetik und Laboratoriumsmedizin
Dr. Klein, Dr. Rost und Kollegen
Lochhamer Str. 29 - D-82152 Martinsried
Telefon: +49(0)89/895578-0 - Fax: +49(0)89/895578-780

More information about the samba-technical mailing list