[Samba] builtin groups are not mapped by winbind

[Rowland Penny]

On Fri, 2022-05-20 at 11:01 -0300, Anderson Sampaio Mello via samba
wrote:
> Hello Rowland.
> 
> > It isn't a problem, for those are WINDOWS groups and are not used
> > on
> > Unix, so why do you need to map them ?
> 
> I want to map the BUILTIN groups to use them.

Why ?

> 
> As for not being used on unix, then why are other BUILTIN groups like
> "BUILTIN\Administrators", "BUILTIN\Guests", "BUILTIN\Users"
> automatically
> mapped?

Because they are Unix groups that are very similar:

Administrators --> the 'root' group
Guests --> the 'nobody' or 'nogroup' group
Users --> the 'users' group

For 'BUILTIN\Guests' you should be using 'Domain Guests'
For 'BUILTIN\Users' you should be using 'Domain Users'

The other BUILTIN groups:
Account Operators
Server Operators
Print Operators
Backup Operators
Replicators

are only meant to be used on a DC.

Rowland