[Samba] Question on Samba PDC: Permissions and groups

[Jason Williams]

Hello everyone.

Im setting up a Samba PDC running 2.2.8a with LDAP on the backend to hold 
user accounts, machines and passwords.
My question is actually on permissions and groups for users who are part of 
the domain.

For example, in my testing, i've been able to successfully join machines 
and clients to the PDC. However, when I log into the domain with the user, 
I noticed that they have considerably less permissions. For example, they 
do not have the ability to change the computer name or workgroup/domain.

So in a nutshell, how can I modify permissions for items like these? How 
can I make more strict permissions as well as less strict permissions?

Thanks everyone.

Jason