[Samba] Domain Admins

Bradley W. Langhorst brad at langhorst.com
Tue Oct 8 15:14:00 GMT 2002


On Tue, 2002-10-08 at 10:25, Irving Carrion wrote:
> Bradley W. Lanhorst wrote,
> > I think you should take a look in the user manager for domains and 
> > add your new Domain Admins group to the Local Admins group...
> 
> How shall I run User manager for domains without an NT box.  I only have
> 1 domain controller.
you can run it on a client...
you may not need the "for domains" bit 
on xp you don't 

brad
>  
> > IIRC Domain Admins have, by default, permissions to modify domain
> > settings like group membership etc but not local administrative rights
> > like running windows update.
> > I could be wrong about this though.
> 
> I don't think so, as I'm sure it worked before on the old NT network I
> used to have and on Samba V. 2.2.3a.

I can't explain that - maybe somebody else who knows can chime in...
I don't think it makes sense for a Domain Admin to automatically have
Local adminstrative rights...

Maybe there was something special about the domain admin mapping in
samba2

brad
 





More information about the samba mailing list