[Samba] Re: Administrator doesn't have admin rights on workstation

[Steve A]

Felipe Alfaro Solana wrote:
> AFAIK, the Domain Admins group has a fixed RID of 512. Thus, your SID
> should look like S-1-5-21-3323006203-4037909810-1162086780-512
> instead. The same happens with the Domain Users (RID 513), Domain
> Computers (RID 515) and Domain Guests (RID 514).

Thanks Felipe, you pointed me in the right direction.  When I did 'net 
groupmap list', I saw 2 each of "Domain Admins", "Domain Users" and "Domain 
Guests".  When I first configured them, I did 'net groupmap add ...' instead 
of 'net groupmap modify ...'.  When I deleted the incorrect groups and 
re-configured - it works ok now.

One more question though, I logged on as the Domain Admin, but 
HKCU\Users\<SID> does not end in 5xx, it is set to:
"S-1-5-21-3323006203-4037909810-1162086780-3006"

Is that ok?

Thanks,
Steve :)