[Samba] Domain Users group howto...

[Vincent Yonemitsu]

Ok I figured it out I was also able to guess at delmem to remove  Domain
Users from the local Users group, and if I just plain text the Domain
admin account and password into the -Uadministrator%secret thing it
works. but I still get the errors even though it applies the change on
the local machine. Any idea what that error means? I am thinking windows
is echoing back some sort of request that sambas net command doesn't
understand.
So the -S = System Name and -U = Domain Admin User account  and the
second lines you mentioned setup a local user on the machine and set its
local windows password? Very cool. I like that tool. I flipped through
the man page on it, lots of stuff in there.  A bit of info on that in
the samba by example would be great, a few examples of common tasks and
the syntax that goes along with it.

On May 16, 2005 03:13 PM, John H Terpstra <jht at Samba.Org> wrote:

> On Monday 16 May 2005 12:43, Vincent Yonemitsu wrote:
> > I have setup samba 3 as a PDC for a set of computers that previously
> > had
> > Domain Users setup to run as local admins under XP, so that anyone
> > that
> > has logged into the domain has local admin access. Whats the best
> > way to
> > replicate this setup so that I don't have to go around to each
> > computer
> > and change the local security policy?
> >
> > Is there a way to assign users to the group domain users?
> > or would i just do something like
> > net groupmap modify ntgroup="Domain Admins" unixgroup=smbusers
>
> net rpc group addmem "Administrators" "Domain Users" -S MAGGOT
> -Uadministrator%secret
>
> Where MAGGOT is the remote Windows client. This can be done from the
> Samba PDC
> or BDC. It can be scripted.
>
> > and make everyone an user in smbusers?
>
> net rpc user add 'user_name' -Uroot%secret
> net rpc password 'username' 'new_secret' -Uroot%not24get
>
> How does that sound? There will soon be a new chapter in the
> Samba-HOWTO-Collection that documents use of the 'net' command for
> local and
> remote management.
>
> - John T.
> --
> John H Terpstra
> Samba-Team Member
> Phone: +1 (650) 580-8668
>
> Author:
> The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
> Samba-3 by Example, ISBN: 0131472216
> Hardening Linux, ISBN: 0072254971
> Other books in production.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
>


Vincent Yonemitsu
Information Technology Services
(905)639-3611 ext 153
yonemitsuv at bpl.on.ca