[Samba] What makes an account is DOMAIN ADMINISTRATOR?

Felipe Alfaro Solana felipe_alfaro at linuxmail.org
Fri Jul 25 10:30:00 GMT 2003

On Fri, 2003-07-25 at 12:14, Beast wrote:
> Another problem :(
> I create ordinary unix user, put in smbadmin unix group.
>   smbadmin:x:999:beast
> I create machine trust account (in unix and smbpasswd)
>   [root at potato root]# pdbedit -L
>   beast:500:
>   trg02$:501:
> I map "smbadmin" to "Domain Admins" ntgroup :
>   Domain Admins (S-1-5-21-682855339-941891451-1873685625-512) -> smbadmin
> >From Win2000, I can not joint this client to domain with user "beast", it says : Login
> failure: unknown username or bad password.
> (FYI, I can login using beast on Win98 client, so no pb in
> username/password)
> So, what is exactly requirement for Domain admins?????

To be able to join a Windows XP/2000 computer to a Samba Domain, during
the process you must supply a Samba user that is mapped to UID=0 on your
Samba server.

The easiest way is to create an "Administrator" user in Samba and assign
it a UID of 0. Then, when joining your Windows machine to the domain,
use that "Administrator" user.

More information about the samba mailing list