Golden Butler wrote:

Hi,

I'm trying to set up one of my users to be a domain admin. I have unix/ldap group called "domainadm" with "user1" a member of the group. When I run "net groupmap list" I get the following:

Domain Admins (S-1-5-21-186220259-3826000728-3192352269-7033) -> domainadm

But when I go to log in to the domain with "user1" on a winxp machine, the user isn't able to make administrative changes to the computer.

Is there something I'm doing wrong?

- Delamatrix

SLES9-SP3
Samba 3.0.20b
Openldap

It's not clear what you are trying to do. If the Windows user1 is a member of "Domain Admins" and if Domain Admins have administrative rights on the winxp machine, user1 should have administrative rights on the winxp machine.

If the Unix group domainadm has some special privileges on your Samba server, then user1 should be able to exercise those privileges.

Neither condition is automatic however. You need to set up the privileges.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to