[Samba] what is the SID of the domain administrator?
beast at i6x.org
Thu Nov 17 09:57:35 GMT 2005
Tomasz Chmielewski wrote:
> Paul Gienger schrieb:
>>> Does the domain administrator SID always end with -1000?
>> It should never be 1000
>> Please review
> Well, for me it's -1000 for two different Samba domains. Coincidence?
Administrator SID should -500, but any user can be a member of domain
admin (group SID -512), so as long as you add that user to Domain Admins
group, it always has admin priviledge.
However, to be a 'true' administrator (ie, able to join a pc to domain),
you must give them unix uid of 0.
More information about the samba