[Samba] Non-root accounts cannot join the Samba PDC:s domain

BJörn Lindqvist bjourne at gmail.com
Sat Aug 26 01:00:15 GMT 2006

> If your Samba version is pretty recent (privilege support was started
> in 3.0.11 and has been improved since then) you can assign the
> SeMachineAccountPrivilege to arbitrary accounts.
> You can set this either from Windows in User Manager
> (Menu Policies->User Rights)
> or from the comman line on your samba server:
>    net rpc rights grant some_account_name SeMachineAccountPrivilege

Thank you, it works! With some caveats. I had to turn permissions on
in samba.conf, then the net rpc rights grant syntax seem to be
"unstable." This doesn't work:

net rpc rights grant username SeMachineAccountPrivilege

Instead of username you are supposed to use some DOMAIN/username
syntax I haven't figured out. Howerver, I was able to allow everyone
to join the domain with:

net rpc rights grant Everybody SeMachineAccountPrivilege

mvh Björn

More information about the samba mailing list