[Samba] Domain admin has no access to C:\Windows\system32\rundll32.exe
rpenny at samba.org
Thu Aug 6 17:14:11 UTC 2020
On 06/08/2020 17:51, James B. Byrne via samba wrote:
> Windows 10 Pro
> I have added a windows laptop to the test domain using the domain administrator
> account. I have logged on to the domain using the domain administrator
> account. When I attempt to open the Settings->Personalization -> Desktop icon
> settings I get this error:
> C:\Windows\system32\rundll32.exe (File version 10.0.18362.1)
> Windows cannot access the specified device path, or file. You may not have the
> appropriate permissions to access the item.
> Checking the security of that file I do not see any mention of the domain to
> which the computer has been added and logged on to.
> In security I see:
> ALL APPLICATION PACKAGES rx r
> ALL RESTRICTED APPLICATION PACKAGES rx r
> SYSTEM rx r
> Administrators (AKL-M01)\Administrators) rx r
> Users (AKL-M01\Users) rx r
> TrustedInstaller f m rx r w
> Ctrl Pnl -> Admin tools -> Comp Mgmt -> Local Users and Groups -> Groups ->
> Administrators show that BROCKLEY\Domain Admins is a member.
> So I checked samba and this is what I discovered:
> [root at smb4-2 ~ (master)]# samba-tool group listmembers "Domain Admins"
> Is this telling me that the administrator account name is case sensitive?
No, either case will work on Linux.
How did you log into the laptop ?
did you just log in as 'Administrator' or as 'BROCKLEY\Administrator' ?
More information about the samba