[Samba] net rpc rights grant root SeDiskOperatorPrivilege failed with "Failed to grant privileges for root (NT_STATUS_ACCESS_DENIED)"

[Nagaraj Shyam]

Hi zoolook.

 

Thanks for the reply. 

 

In my case I had got the command to work when the samba server was standalone.

 

I just figured out that I need to provide the domain admin password to change privileges if samba server has joined a domain ... 

 

-s

 

From: zoolook [mailto:nbensa at gmail.com] 
Sent: Thursday, May 13, 2010 6:02 AM
To: Nagaraj Shyam
Cc: samba at lists.samba.org
Subject: Re: [Samba] net rpc rights grant root SeDiskOperatorPrivilege failed with "Failed to grant privileges for root (NT_STATUS_ACCESS_DENIED)"

 

You need to tell net with which user you run the command:

net rpc rights grant USERNAME SeDiskOperatorPrivilege -Uroot

HTH,
Norberto 

	El 13/05/2010 9:53, "Nagaraj Shyam" <Nagaraj_Shyam at symantec.com> escribió:
	
	Hi,
	
	
	
	I have a samba server setup as a domain member.  I am trying to grant
	SeDiskOperatorPrivilege to some user accounts e.g. "domainaname\User",
	but I always get the above error.  It doesnot matter what I specify as
	the server in -S option to the command.  The command syntax I use is:
	
	
	
	net rpc rights grant "username" SeDiskOperatorPrivilege
	
	
	
	OR
	
	
	
	net -S ADserver -U support rpc rights grant 'domain\Administrator'
	SeDiskOperatorPrivilege
	
	
	
	I am trying to grant the above privilege because managing samba shares
	through mmc from remote windows system is failing with:
	
	
	
	_srvsvc_NetShareSetInfo: uid 10500 doesn't have the
	SeDiskOperatorPrivilege privilege needed to modify share myshare
	
	
	
	
	
	Uid 10500 is 'domain\Administrator' account
	
	
	
	I can send the relevant smb.conf and any additional traces I need to
	capture.  Can anyone provide ideas on what could be going wrong?  The
	above feature(s) is supposed to be supported by samba 3.5.1 which I am
	using.
	
	
	
	Thanks for the help.
	
	
	
	-s
	
	--
	To unsubscribe from this list go to the following URL and read the
	instructions:  https://lists.samba.org/mailman/options/samba