[Samba] AD User with Domain Admin

Rowland penny rpenny at samba.org
Thu Dec 3 18:25:34 UTC 2020

On 03/12/2020 17:48, Maurizio Caloro via samba wrote:
> Hello
> AD 4.13.2 running, Joinet Debina 10 machine, if sign in with Domain Admin
> User to Debian, aim a normal User without any more rights
> I need to put the AD Admin User to Passwd Group? So that this will receive
> the Domain Admin Right on this Debian Server?
> Thanks
By 'Domain Admin User' do you mean 'Administrator' ?

If so, you need a line like this in your Unix domain members smb.conf:

username map = /etc/samba/user.map

and create /etc/samba/user.map containing this:

!root = DOMAIN\Administrator

Where 'DOMAIN' is your workgroup name.

If this isn't your problem, please post your smb.conf.


More information about the samba mailing list