[Samba] What makes an account is DOMAIN ADMINISTRATOR?

[Felipe Alfaro Solana]

On Fri, 2003-07-25 at 12:14, Beast wrote:
> Another problem :(
> 
> I create ordinary unix user, put in smbadmin unix group.
> 
>   smbadmin:x:999:beast
> 
> I create machine trust account (in unix and smbpasswd)
>   [root at potato root]# pdbedit -L
>   beast:500:
>   trg02$:501:
> 
>   
> I map "smbadmin" to "Domain Admins" ntgroup :
> 
>   Domain Admins (S-1-5-21-682855339-941891451-1873685625-512) -> smbadmin
> 
> >From Win2000, I can not joint this client to domain with user "beast", it says : Login
> failure: unknown username or bad password.
> (FYI, I can login using beast on Win98 client, so no pb in
> username/password)
> 
> So, what is exactly requirement for Domain admins?????

To be able to join a Windows XP/2000 computer to a Samba Domain, during
the process you must supply a Samba user that is mapped to UID=0 on your
Samba server.

The easiest way is to create an "Administrator" user in Samba and assign
it a UID of 0. Then, when joining your Windows machine to the domain,
use that "Administrator" user.