[Samba] Domain Admins

[Golden Butler]

Hi,

I'm trying to set up one of my users to be a domain admin.  I have 
unix/ldap group called "domainadm" with "user1" a member of the group.  
When I run "net groupmap list" I get the following:

Domain Admins (S-1-5-21-186220259-3826000728-3192352269-7033) -> domainadm

But when I go to log in to the domain with "user1" on a winxp machine, 
the user isn't able to make administrative changes to the computer.

Is there something I'm doing wrong?

- Delamatrix

SLES9-SP3
Samba 3.0.20b
Openldap