[Samba] Administrator doesn't have admin rights on workstation

[Eric J. Feldhusen]

I've had similar problems before, make sure you don't have any unix 
group mapped to multiple Windows groups.

Like having

Domain users -> users
Staff users -> users

Eric Feldhusen

Brian May wrote:
>>>>>> "Steve" == Steve A <gmane at rowyerboat.com> writes:
> 
>     Steve> Hello, I'm running FreeBSD-6.1, and Samba 3.0.22 with a
>     Steve> Windows XP (SP2) client.
> 
>     Steve> As per subject line, administrator doesn't have
>     Steve> administrator rights on the workstation.
> 
> Hmmm. I noticed the similar thing on my system.
> 
> I also noticed, as discussed here, that the RID for my Domain Admins
> group was wrong.
> 
> However I still have issues, even after fixing the RID as discussed in
> this thread.
> 
> Just to clarify: Does belonging to the "Domains Admins" group mean you
> should automatically get full administrator rights when logged onto
> any computer?
> 
> Also, what is the difference between the terms "RID" and "SID"?
> 
> 
> sam:~# net groupmap list
> ...
> Domain Admins (S-1-5-21-1268321594-3481289969-4150125466-512) -> Domain Admins
> 
> sam:~# pdbedit  -Lv administrator
> ...
> Unix username:        administrator
> NT username:          administrator
> Account Flags:        [UX         ]
> User SID:             S-1-5-21-1268321594-3481289969-4150125466-21104
> Primary Group SID:    S-1-5-21-1268321594-3481289969-4150125466-512
> Full Name:            Domain Administrator
> Home Directory:       \\sam\administrator
> HomeDir Drive:        U:
> Logon Script:         logon.cmd
> Profile Path:         
> Domain:               VPAC
> Account desc:         
> Workstations:         
> Munged dial:          
> Logon time:           0
> Logoff time:          Tue, 19 Jan 2038 14:14:07 EST
> Kickoff time:         Tue, 19 Jan 2038 14:14:07 EST
> Password last set:    Mon, 03 Jul 2006 10:33:32 EST
> Password can change:  0
> Password must change: Tue, 19 Jan 2038 14:14:07 EST
> Last bad password   : 0
> Bad password count  : 0
> Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF