[Samba] what is the SID of the domain administrator?

Beast beast at i6x.org
Thu Nov 17 09:57:35 GMT 2005

Tomasz Chmielewski wrote:
> Paul Gienger schrieb:
>>> Does the domain administrator SID always end with -1000?
>> It should never be 1000
>> Please review
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;243330
> Well, for me it's -1000 for two different Samba domains. Coincidence?

Administrator SID should -500, but any user can be a member of domain 
admin (group SID -512), so as long as you add that user to Domain Admins 
group, it always has admin priviledge.
However, to be a 'true' administrator (ie, able to join a pc to domain), 
you must give them unix uid of 0.



More information about the samba mailing list