[Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

Ryan Suarez ryan.suarez at sheridanc.on.ca
Tue Sep 8 08:59:19 MDT 2009

Gerald Carter wrote:
> Hey Ryan,
>> The samba host is a domain member server (security=ADS) 
>> with winbind for user accounts.   Where is this user rights
>> database stored and what is the tool to assign admin privileges?
> Use 'net sam' to add the user in question to the BUILTIN\Administrators
> group on your Samba host.  The user rights assignments are stored
> in account_pol.tdb IIRC (but that may have changed).  It's been
> several years since I look at that code and I remember Michael Adam
> making some interface changes.  But I think the storage location on
> smbpasswd and tdbsam installations is the same.
Thanks, it worked for me!  Looks like the local BUILTIN\Administrators 
has all those rpc rights granted by default.

much appreciated,

More information about the samba mailing list