[Samba] Setting permissions on AD member file server

[Rowland Penny]

On Thu, 2022-03-10 at 11:32 -0800, Greg Sloop <gregs--- via samba
wrote:
> No, that doesn't appear to resolve it.
> (Not that it matters a ton, but what is that option - what does it
> even do?)

It allows Administrator to set permissions (in conjunction with a
user.map) on a Unix share from Windows

I can now confirm that a member of Domain Admins is denied changing
permissions from Windows:

'Failed to enumerate objects in the container. Access is denied.'

Looking in the logs (log.smbd to be precise), I found this:

[2022/03/11 14:31:09.597911, 10, pid=3567, effective(11107, 10513),
real(11107, 0)] ../../source3/smbd/open.c:6254(create_file_default)
  create_file: NT_STATUS_ACCESS_DENIED

Rowland