[Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED
ryan.suarez at sheridanc.on.ca
Tue Sep 8 08:59:19 MDT 2009
Gerald Carter wrote:
> Hey Ryan,
>> The samba host is a domain member server (security=ADS)
>> with winbind for user accounts. Where is this user rights
>> database stored and what is the tool to assign admin privileges?
> Use 'net sam' to add the user in question to the BUILTIN\Administrators
> group on your Samba host. The user rights assignments are stored
> in account_pol.tdb IIRC (but that may have changed). It's been
> several years since I look at that code and I remember Michael Adam
> making some interface changes. But I think the storage location on
> smbpasswd and tdbsam installations is the same.
Thanks, it worked for me! Looks like the local BUILTIN\Administrators
has all those rpc rights granted by default.
More information about the samba