[Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

[Ryan Suarez]

Gerald Carter wrote:
> Hey Ryan,
>   
>> The samba host is a domain member server (security=ADS) 
>> with winbind for user accounts.   Where is this user rights
>> database stored and what is the tool to assign admin privileges?
>>     
>
> Use 'net sam' to add the user in question to the BUILTIN\Administrators
> group on your Samba host.  The user rights assignments are stored
> in account_pol.tdb IIRC (but that may have changed).  It's been
> several years since I look at that code and I remember Michael Adam
> making some interface changes.  But I think the storage location on
> smbpasswd and tdbsam installations is the same.
>   
Thanks, it worked for me!  Looks like the local BUILTIN\Administrators 
has all those rpc rights granted by default.

much appreciated,
Ryan