[Samba] Domain Admin group problem

garvald at bluemail.ch garvald at bluemail.ch
Thu Feb 19 13:11:47 GMT 2004

what you need is this entry in your smb.conf:

admin users = groupname

then run this on the linux command line:

net groupmap modify ntgroup="Domain Admins" unixgroup=groupname

your user "star" (from the group "groupname") should now be a domain admin


>-- Original-Message --
>Date: Thu, 19 Feb 2004 09:26:18 +0100
>From: "Bolemányi Attila" <bolemanyi.attila at mail.vpop.hu>
>To: samba at lists.samba.org
>Subject: [Samba] Domain Admin group problem
>I've got an interesting problem with my Samba 3.0.2a on Debian Woody.
>I've created the Domain Admins group as I could read in the 
>documentation, and I added
>a user to this group called "star". If I login to a Windows 2000 
>workstation, which is a member of the domain, I can login, but I don't 
>have administrator rights on this workstation. The Domain Admins group 
>is a member of a local Administrators group, but I have to add the user

>called "star" if I want to have administrator rigths on the workstation.
>I thought that it is enough to be a member of a local Administrator 
>group if I am a member of a Domain Admins group. But it does not work.
>My configuration: Debian Woody, Samba 3.0.2a, passdb backend=tdbsam
>Could you give me any idea?
>B. Attila
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba

More information about the samba mailing list