[Samba] Domain Administrator problems - SOLVED

[Julian Pilfold-Bagwell]

Nice one. rpc rights sorted it out straight away. Should have RTFM'd a
bit more ;)

Cheers,

Jools


On Wed, 2008-02-06 at 09:04 -0600, Adam Williams wrote:
> you still have to grant toni priviliges.
> 
> http://us1.samba.org/samba/docs/man/Samba-Guide/happy.html#id353033
> 
> Julian Pilfold-Bagwell wrote:
> > Hi All,
> >
> > I have a tdbsam backend on Samba PDC and am trying to set a user up as a
> > domain admin. I read that instead of the old admin users line in
> > smb.conf you now use net groupmap to map unix groups to NT groups.
> >
> > I have a user called toni in unix group admins and have run:
> >
> > net groupmap add rid=512 ntgroup="Domain Admins" unixgroup=admins
> >
> > running:
> >
> > net groupmap list gives:
> >
> > Domain Admins (S-1-5-21-2201139836-2091317229-5964732158-512) -> admins
> >
> > which is the correct sid for the domain, but doing domain admin like
> > things, e.g. gpedit, changing network settings etc., on an XP client
> > leads to warnings that toni is not an administrator.  
> >
> > Is there something I've missed? Setup is Centos 5.1, Samba 3.0.25 and
> > smbusers maps root to administrators.
> >
> > Thanks,
> >
> > Jools
> >
> >