[Samba] Samba on Debian 8; NT4 domain, win10

[Rowland Penny]

On Mon, 12 Dec 2016 10:17:10 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

> Am 2016-12-12 um 10:07 schrieb Rowland Penny via samba:
> 
> > Who is 'S-1-5-21-2777655458-4002997014-749295002-1000' and what is
> > 'S-1-5-21-2777655458-4002997014-749295002-1006' ?
> 
> # pdbedit -Lv root
> Unix username:        root
> NT username:
> Account Flags:        [U          ]
> User SID:             S-1-5-21-2777655458-4002997014-749295002-1000
> Primary Group SID:    S-1-5-21-2777655458-4002997014-749295002-1006
> 
> 
> # net groupmap list
> Domain Admins (S-1-5-21-2777655458-4002997014-749295002-1006) -> root
> 
> thanks
> 
> 

Try removing the mapping between the 'root' group and 'Domain Admins'.
The AD user Administrator will be mapped to the 'root' user on the DC
and Administrator is automatically made a member of Domain Admins.

Rowland