Am 2016-12-12 um 10:41 schrieb Rowland Penny via samba: > Try removing the mapping between the 'root' group and 'Domain Admins'. > The AD user Administrator will be mapped to the 'root' user on the DC > and Administrator is automatically made a member of Domain Admins. Doesn't help, sorry.