Torsten E. schrieb am Mittwoch, 29. September 2004 00:22: > Igor Belyi schrieb am Dienstag, 28. September 2004 21:16: > >> Torsten E. wrote:
Hello again, [...] >> Look into 'net groupmap list'. The right 'Domain Admins' should have >> RID (the last number after '-') 512 and SID (all numbers before the >> last '-') corresponding to your Domain SID ('net getlocalsid'). >> >> Use 'net groupmap delete' or 'net gropumap modify' to fix the >> problem. > > Ok, Thanks Igor! > I guess the: > S-1-5-21-1313674548-3619494541-1192360840-... > are the wrong ones (Domain Admins, Domain Guests & Domain Users) ... [...] > I'll delete them tomorrow. So, I just tried to delete those groups/SIDs, but it doesn't work ...: pdc:/home/torsten # net groupmap list System Operators (S-1-5-32-549) -> ntadmin Domain Users (S-1-5-21-363742550-2379833043-2840705137-513) -> ntuser Replicators (S-1-5-32-552) -> ntadmin Guests (S-1-5-32-546) -> nogroup NTUsers (S-1-5-21-363742550-2379833043-2840705137-1201) -> ntuser Domain Users (S-1-5-21-1313674548-3619494541-1192360840-513) -> -1 Power Users (S-1-5-32-547) -> ntuser Print Operators (S-1-5-32-550) -> ntadmin Administrators (S-1-5-32-544) -> ntadmin Account Operators (S-1-5-32-548) -> ntadmin Domain Guests (S-1-5-21-1313674548-3619494541-1192360840-514) -> -1 Backup Operators (S-1-5-32-551) -> ntadmin Users (S-1-5-32-545) -> ntuser Domain Admins (S-1-5-21-1313674548-3619494541-1192360840-512) -> -1 Domain Admins (S-1-5-21-363742550-2379833043-2840705137-512) -> ntadmin Domain Guests (S-1-5-21-363742550-2379833043-2840705137-514) -> nogroup pdc:/home/torsten # pdc:/home/torsten # net groupmap delete ntgroup="Domain Admin" sid=S-1-5-21-1313674548-3619494541-1192360840-512 Sucessfully removed S-1-5-21-1313674548-3619494541-1192360840-512 from the mapping db pdc:/home/torsten # net groupmap delete sid=S-1-5-21-1313674548-3619494541-1192360840-513 Sucessfully removed S-1-5-21-1313674548-3619494541-1192360840-513 from the mapping db pdc:/home/torsten # net groupmap delete sid=S-1-5-21-1313674548-3619494541-1192360840-514 Sucessfully removed S-1-5-21-1313674548-3619494541-1192360840-514 from the mapping db pdc:/home/torsten # pdc:/home/torsten # net groupmap list sid=S-1-5-21-1313674548-3619494541-1192360840-512 Domain Admins (S-1-5-21-1313674548-3619494541-1192360840-512) -> -1 pdc:/home/torsten # net groupmap list sid=S-1-5-21-1313674548-3619494541-1192360840-513 Domain Users (S-1-5-21-1313674548-3619494541-1192360840-513) -> -1 pdc:/home/torsten # net groupmap list sid=S-1-5-21-1313674548-3619494541-1192360840-514 Domain Guests (S-1-5-21-1313674548-3619494541-1192360840-514) -> -1 pdc:/home/torsten # Any idea why it does not work? Thanks in advance Torsten >> Igor > > c y > Torsten -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba