Tomasz Chmielewski wrote:
Paul Gienger schrieb:
Does the domain administrator SID always end with -1000?
It should never be 1000
Please review
http://support.microsoft.com/default.aspx?scid=kb;en-us;243330
Well, for me it's -1000 for two different Samba domains. Coincidence?
Administrator SID should -500, but any user can be a member of domain
admin (group SID -512), so as long as you add that user to Domain Admins
group, it always has admin priviledge.
However, to be a 'true' administrator (ie, able to join a pc to domain),
you must give them unix uid of 0.
--
--beast
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
