Delegation of permissions

[Marc Muehlfeld]

Hello,

I wanted to ask, what the current state is of delegating permissions on 
samba4. I tried delegating GPO editing, user/group management and allow to 
bring computers into the domain. All seem not to work (or I do something wrong).

I saw that samba-tool has a delegation option, but don't know how to use it. I 
only tried it with ADUC.

For adding computers to the domain I already opened a bugreport 
(https://bugzilla.samba.org/show_bug.cgi?id=9267) with logfiles, etc.

Should delegation already work? And if, for what parts of AD? If not, is it 
planned for s4 final? I mean: Like many companies, we don't want everyone in 
the helpdesk to know the domain admin password just for e. g. bringing a new 
workstation into the domain. :-)

Regards,
Marc


-- 
Marc Muehlfeld (IT-Leiter)
Zentrum fuer Humangenetik und Laboratoriumsmedizin
Dr. Klein, Dr. Rost und Kollegen
Lochhamer Str. 29 - D-82152 Martinsried
Telefon: +49(0)89/895578-0 - Fax: +49(0)89/895578-780
http://www.medizinische-genetik.de