[Samba] builtin groups are not mapped by winbind

Rowland Penny rpenny at samba.org
Fri May 20 14:30:02 UTC 2022

On Fri, 2022-05-20 at 11:01 -0300, Anderson Sampaio Mello via samba
> Hello Rowland.
> > It isn't a problem, for those are WINDOWS groups and are not used
> > on
> > Unix, so why do you need to map them ?
> I want to map the BUILTIN groups to use them.

Why ?

> As for not being used on unix, then why are other BUILTIN groups like
> "BUILTIN\Administrators", "BUILTIN\Guests", "BUILTIN\Users"
> automatically
> mapped?

Because they are Unix groups that are very similar:

Administrators --> the 'root' group
Guests --> the 'nobody' or 'nogroup' group
Users --> the 'users' group

For 'BUILTIN\Guests' you should be using 'Domain Guests'
For 'BUILTIN\Users' you should be using 'Domain Users'

The other BUILTIN groups:
Account Operators
Server Operators
Print Operators
Backup Operators

are only meant to be used on a DC.


More information about the samba mailing list