[Samba] ADS joined, can't manage shares from MMC

Mike Partyka mpartyka at gmail.com
Thu Jan 5 15:52:19 GMT 2006


I see, i did as you originally suggested and i didn't get an error, but i
didn't get any output either, just returned to the prompt. So this must mean
that the domain administrator account has no privileges?

When i list privileges i get:

[root at sand ~]# net rpc rights list -Uadministrator%password
     SeMachineAccountPrivilege  Add machines to domain
      SePrintOperatorPrivilege  Manage printers
           SeAddUsersPrivilege  Add users and groups to the domain
     SeRemoteShutdownPrivilege  Force shutdown from a remote system
       SeDiskOperatorPrivilege  Manage disk shares

But then if i try to grant privileges to the domain administrator i get:

[root at sand ~]# net rpc rights grant "MRPARTYKA/Administrator"
SeMachineAccountPrivilege -Uadministrator%password
Failed to grant privileges for MRPARTYKA/administrator
(NT_STATUS_NO_SUCH_PRIVILEGE)

And yet, it appears in the list of available rights, so where am i going
wrong?

On 1/4/06, Gerald (Jerry) Carter <jerry at samba.org> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Mike Partyka wrote:
> > Here is are the permissions mapped to administrator:
> >
> > [root at sand ~]# net rpc rights list -Uadministrator%password
> >      SeMachineAccountPrivilege  Add machines to domain
> >       SePrintOperatorPrivilege  Manage printers
> >            SeAddUsersPrivilege  Add users and groups to the domain
> >      SeRemoteShutdownPrivilege  Force shutdown from a remote system
> >        SeDiskOperatorPrivilege  Manage disk shares
>
> No that just shows which ones are available on the server.
>
> # net rpc rights list accounts -Uadministrator%password
>
>
>
>
> ciao, jerry
> =====================================================================
> Alleviating the pain of Windows(tm)      ------- http://www.samba.org
> Centeris                         -----------  http://www.centeris.com
> "There's an anonymous coward in all of us."               --anonymous
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFDvJZ8IR7qMdg1EfYRAk2hAKCHUuDDQilBax1CufobsBUTxE8uwwCffXQv
> Ql0Lili7pRINIsg1LvZ4Roo=
> =xPWO
> -----END PGP SIGNATURE-----
>


More information about the samba mailing list