[Samba] Setting Win ACLs via Comp Managment, connection to Member Server warning

[Lin Pro]

Hi,
I try to follow the instructions
(https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#File_System_ACLs_in_the_Back_End)

A big screen pops up with when an attempt is made to connect to member
server, then connection is granted but I am suspitious if changes can
be made.


SeDiskOperatorPrivilege on ADDC is granted to BUILTIN\Administrators
and Domain Admins

But the Member Server has that permission granted only to
BUILTIN\Administrators.
Why?
Is this normal? Should the permissions be set on the member server
instead, not on the ADDC? or whould they propagate across from ADDC to
Member Server...?

thank for hints




-- 
best regards
linforpros