[Samba] Fwd: most common way to implement 'net time' privileges

[Witold Tosta]

Liutauras Adomaitis pisze:
> On Wed, Aug 26, 2009 at 6:11 PM, Volker
> Lendecke<Volker.Lendecke at sernet.de> wrote:
>> On Wed, Aug 26, 2009 at 06:05:35PM +0300, Liutauras Adomaitis wrote:
>>> now size is few times larger. Try it now
>>> http://www.infosaitas.lt/logas.txt
>> Normally a "Device is not functioning" (or so) means an
>> NT_STATUS_UNSUCCESSFUL error message. I don't see any such
>> error message in the logs. When *exactly* did the error
>> happen when you took the log?
>>
> 
> I looked through the logs again - no line with NT_STATUS_UNSUCCESSFUL.
> 
> I found other thing (look below). It says
> ldapsam_getsampwsid: Unable to locate SID
> [S-1-5-21-1376040910-2644421868-2724539926-513]
> Could this be the problem?
> 

I have the same issue on samba 3.4.0. Previously I thought all 
usrmgr.exe's features does not work for Samba, but only for NT 4.0.

The issue comes out when using the latest version 5.2.3790.1127 of 
usrmgr.exe. The previous ones shipped with Windows NT 4.0 Server and 
Windows 2000 Server (4.0.1371.1 and versions 5.0.2195.6601) work well, 
but in both there are no changing time policy setting in the menu of 
policy --> user rights settings group :-)

Allowing Domain Users setting time for their machines via time change 
settings (clock settings on right bottom corner of windows desktop) or 
via logon.bat for example I resolved adding Domain User Group into the 
policy called "Allow user time change" under secpol.msc utility from 
Windows XP Professional workstation.

Moreover using policy settings from usrmgr.exe utility is more elegant 
in my opinion and I would be very grateful to know the issue that not 
allowes to use these policy based settings.

Best regards
Witek