[Samba] How to map locked user Administrator in AD domain to guest ?

[Buozis, Martynas]

Hello

I have Samba running as AD member. In addition there is a support of
quest user connections to shares, that allow guest connections to
shares, where access is restricted on IP addresses base. 

Problem is, that Administrator is not mapped to guest, because
Administrator in AD domain is locked. Samba gets respond
NT_STATUS_ACCOUNT_LOCKED_OUT and denies connection. While computers,
that are not AD members want use Samba shares that are guest allowed and
can't do that while logged in as Administrator. If Administrator is
unlocked - option map to guest on bad password is working perfect.

Is there a way to say, that user Administrator must be guest even if it
is locked ?


With best regards
Martynas Buozis