[Samba] Computer Management - Share Security - No Read Access

[Viktor Trojanovic]

My domain admins group doesn't have this privilege and I can still set 
security permissions from Windows just fine, though I've been doing it 
using the default domain administrator account so I can't comment if 
that's different from using another domain admin account.

net rpc rights list privileges looks as follows in my case:

SeDiskOperatorPrivilege: SAMDOM\Domain Admins
SeSecurityPrivilege: BUILTIN\Administrators


On 18.02.2019 03:49, Marco J Shmerykowsky PE via samba wrote:
> No. If it was mentioned in any of the samba docs consulted, then I missed it.
>
>
>
> On February 17, 2019 9:43:18 PM EST, Luke Barone via samba <samba at lists.samba.org> wrote:
>> Did you add the seSecurityPrivilege permission for Domain Admins as
>> well?
>>
>> On Sun, Feb 17, 2019 at 3:13 PM Marco Shmerykowsky via samba <
>> samba at lists.samba.org> wrote:
>>
>>> Can't figure out what is going on.
>>>
>>> I define the shares in smb.conf
>>>
>>> [share]
>>> path = /server/share
>>> read on = no
>>>
>>> When I go to "Computer Management" in Windows I
>>> can create the share and I can set Share Permissions.
>>>
>>> However, when I go to the "Security" tab for the
>>> share I get "You must have Read permissions to
>>> view the properties of this object"
>>>
>>> I set SeDiskOperatorPrivilege for Domain Admins
>>> on the server with the share.  I'm using a domain
>>> admin account to access the snap-ins.
>>>
>>> What am I missing?
>>>
>>>
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba