Web lists-archives.com

Re: [Samba] AD administrator can't administer




Hi Robert,

Over time I have ignored the fact that my AD administrator has stopped
being able to administer. For example, the Ad administrator cannot install
drivers or updates. Once a week now, I logout as workstation user and login
as the "local administrator" to install drivers or run windows updates (in
today's case a printer driver on the workstation.)

Does this falls into that "gray area" between Samba and Windows OS (10Pro)?
I am not sure where to post questions so, I am starting here.

This seems to be a AD administrator permissions issue? Anyone else having
this experience? Thoughts on how to correct this?

The administrator users is not necessarily local admin on workstation (and actually it shouldn't for security reasons). However it is the default setup if one has not messed up with the configuration.

By default "local administrators" group on a workstation has "domain admins" as a member, and "domain admins" has "administrator" account as a member.

So I guess you should check the membership of your "local administrators" group on your win10.

Cheers,

Denis





--
Denis Cardon
Tranquil IT
12 avenue Jules Verne (Bat. A)
44230 Saint Sébastien sur Loire (FRANCE)
tel : +33 (0) 240 975 755
http://www.tranquil.it

Tranquil IT recrute! https://www.tranquil.it/nous-rejoindre/
Samba install wiki for Frenchies : https://dev.tranquil.it
WAPT, software deployment made easy : https://wapt.fr

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba