[Samba] Embedding a "Domain Group" in "Domain Administrators" ???

Michael Gasch gasch at eva.mpg.de
Tue Sep 20 11:16:52 GMT 2005

hi list,

is it possible with samba v3 and ldap backend to embedd a normal group 
like "normalgroup" in the group "Domain Administrators" to give members 
of the group "normalgroup" full administrative rights on workstations?

i tried with "net groupmap addmem sid-of-normalgroup 
sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins 
sid-of-normalgroup", which adds two sidlistattributes in my ldap backend 
in the corresponding group. but when i login to the domain with a member 
of "normalgroup" i don't have administrative privileges on the 
workstation. is that by design or not implemented yet?

thanks in advance!

Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
D-04103 Leipzig

Phone: 49 (0)341 - 3550 137

More information about the samba mailing list