[Samba] Adding Domain User Accounts to Windows 7 Clients (Samba 3.4.8 PDC)

[Walton, Bryan K]

On Thu, Jun 17, 2010 at 06:22:54PM -0500, David Whitney wrote:
> 
> Could you explain a bit more what you mean by trying to create a "local
> user" out of a domain user?

I'm realizing that I've done a very poor job of wording what I was
trying to accomplish.  Essentially, my goal is this:

I have user accounts set up on our domain.  These accounts do not
have administrative rights on the domain.  However, in some cases, I
would like a given domain account to have local administrative rights on
their workstation.  In the past, when logged into the workstation under
an administrator account, I have used the add user window as seen in
the screenshot show in this link:

http://www.ejoose.com/Windows2000/installation/add.user.windows.2000.gif

I would simply click on the add button.  Specify our Samba domain and
the user account.  Then, I would specify that this user was to have
administrative rights on this box.  It worked great.

However, with Windows 7, when using this same process, I would receive
the trust relationship error, as mentioned in my original post (even
though the I've made the registry fixes required and even though the
workstation was already joined to the domain).

What I'm doing now, and is working for me, is simply adding the
specified domain user account to the local administrator group, by
clicking on the advanced tab and then making my way into the local group
listing and adding the user to the Administrator's group.

I think, in the end, both ways that I have employed achieve the same
thing, it is just that the way I've previously done it isn't currently
working.  But the new way suffices.

Again, sorry for the confusion caused by my poor wording.

Cheers,
Bryan