[Samba] AD User with Domain Admin

[Rowland penny]

On 03/12/2020 17:48, Maurizio Caloro via samba wrote:
> Hello
>
> AD 4.13.2 running, Joinet Debina 10 machine, if sign in with Domain Admin
> User to Debian, aim a normal User without any more rights
>
> I need to put the AD Admin User to Passwd Group? So that this will receive
> the Domain Admin Right on this Debian Server?
>
> Thanks
>
>   
>
By 'Domain Admin User' do you mean 'Administrator' ?

If so, you need a line like this in your Unix domain members smb.conf:

username map = /etc/samba/user.map

and create /etc/samba/user.map containing this:

!root = DOMAIN\Administrator

Where 'DOMAIN' is your workgroup name.

If this isn't your problem, please post your smb.conf.

Rowland