[Samba] Windows ACLs : problems

[Stefan G. Weichinger]

Am 24.02.20 um 10:34 schrieb Rowland penny via samba:
> On 24/02/2020 08:52, Stefan G. Weichinger via samba wrote:
>> Status:
>>
>> domain member server, Samba version 4.10.11-Debian
>>
>>
>>     username map = /etc/samba/samba_usermapping
> 
> I take it that samba_usermapping contains something like this:
> 
> !root = CUSTOMER\Administrator
> 
>> The share "QM" gives us issues when we edit ACLs via RSAT on windows DC.
>>
>> access denied
>>
>> Folder is owned by
>>
>> administrator:10513
>>
> So why does 'administrator' own the share and not root ?
> 
> If 'Administrator' is used on a Unix domain member, then 'Administrator'
> will only be like any other Unix user and will only be able to do what a
> normal user can.
> 
> Change the owner to 'root' and never use Administrator on a Unix domain
> member.

(solved it somehow inbetween)

I won't touch it anymore today as things work right now.

Thanks for the clarifiying hint, I will use "root" from now on ...

thanks @Rowland