[Samba] what is the SID of the domain administrator?

[Beast]

Tomasz Chmielewski wrote:
> Paul Gienger schrieb:
> 
>>> Does the domain administrator SID always end with -1000?
>>
>>
>> It should never be 1000
>>  
>> Please review
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;243330
> 
> 
> Well, for me it's -1000 for two different Samba domains. Coincidence?
> 

Administrator SID should -500, but any user can be a member of domain 
admin (group SID -512), so as long as you add that user to Domain Admins 
group, it always has admin priviledge.
However, to be a 'true' administrator (ie, able to join a pc to domain), 
you must give them unix uid of 0.

-- 

--beast