[Samba] Domain admin has no access to C:\Windows\system32\rundll32.exe

[Rowland penny]

On 06/08/2020 17:51, James B. Byrne via samba wrote:
> FreeBSd-12.1p7
> Samba-4.10.15
> Windows 10 Pro
>
> I have added a windows laptop to the test domain using the domain administrator
> account.  I have logged on to the domain using the domain administrator
> account.  When I attempt to open the Settings->Personalization -> Desktop icon
> settings I get this error:
>
> C:\Windows\system32\rundll32.exe  (File version 10.0.18362.1)
> Windows cannot access the specified device path, or file. You may not have the
> appropriate permissions to access the item.
>
> Checking the security of that file I do not see any mention of the domain to
> which the computer has been added and logged on to.
>
> In security I see:
>
> ALL APPLICATION PACKAGES  rx r
> ALL RESTRICTED APPLICATION PACKAGES rx r
> SYSTEM rx r
> Administrators (AKL-M01)\Administrators) rx r
> Users (AKL-M01\Users) rx r
> TrustedInstaller f m rx r w
>
> Ctrl Pnl -> Admin tools -> Comp Mgmt -> Local Users and Groups -> Groups ->
> Administrators show that BROCKLEY\Domain Admins is a member.
>
> So I checked samba and this is what I discovered:
>
> [root at smb4-2 ~ (master)]# samba-tool group listmembers "Domain Admins"
> Administrator
>
> Is this telling me that the administrator account name is case sensitive?

No, either case will work on Linux.

How did you log into the laptop ?

did you just log in as 'Administrator' or as 'BROCKLEY\Administrator' ?

Rowland