Pdc is up and running, but how do i add administrator privileges to users logged in to the domain?

Pdc is up and running, but how do i add administrator privileges to users
logged in to the domain?
i have been slaving over the documentation now for hours trying to figure
out how to set policies and so on.

so i was just wondering if anybody could point in the right direction.

I was talking with some bloke on irc. and he said all i had to do was to
make the linux account a super user account (uid=0 and gid=0) so i tried
that, but didn't work.

if anyone is considering making a policy howto, then im an eager reader..

Cheers.

netbrain wrote:
[color=blue]
>
> Pdc is up and running, but how do i add administrator privileges to users
> logged in to the domain?[/color]

With samba-2.2.x, there are no other groups but "Domain admin group" members
explicitely (by name or @groupname) defined in that config line.
Unfortunately then they are also (maybe unbeknownst) Domain admins.
Samba-3 has changed that, you can use pdbedit to add users to predefined
windows security groups like "power users" or local admins. Though, it's a
rather tiresome process yet.
[color=blue]
> i have been slaving over the documentation now for hours trying to figure
> out how to set policies and so on.
>[/color]
Get the "poledit" addon, best from a w2k server cd, it's somewhere hidden.
You have to put the ntconfig.pol into the netlogon share.
However, since windows2k promotes active directory and group policies
instead, it's a bit flakey and doesn't work perfectly (no bugfixing anymore
since it's a leftover from NT4).
[color=blue]
> so i was just wondering if anybody could point in the right direction.
>
> I was talking with some bloke on irc. and he said all i had to do was to
> make the linux account a super user account (uid=0 and gid=0) so i tried
> that, but didn't work.
>[/color]
Uh. No, linux superuser has nothing in common with windows local admin role.
Did the IRC buddies then joke around and sent you some binary niciety? ;-)

--
Longhorn error#4711: TCPA / NGSCB VIOLATION: Microsoft optical mouse
detected penguin patterns on mousepad. Partition scan in progress
to remove offending incompatible products. Reactivate your MS software
(3 days grace period). [LinuxCounter#295241]

On Wed, 31 Dec 2003 21:18:21 +0100, Walter Mautner
<nextnews.15.eatallspam@spamgourmet.com> wrote:
[color=blue]
> netbrain wrote:
>[color=green]
>>
>> Pdc is up and running, but how do i add administrator privileges to
>> users
>> logged in to the domain?[/color]
>
> With samba-2.2.x, there are no other groups but "Domain admin group"
> members
> explicitely (by name or @groupname) defined in that config line.
> Unfortunately then they are also (maybe unbeknownst) Domain admins.
> Samba-3 has changed that, you can use pdbedit to add users to predefined
> windows security groups like "power users" or local admins. Though, it's
> a
> rather tiresome process yet.[/color]

And all this information on pdbedit can i get in the man pages? And, yes
im using samba 3.
[color=blue]
>[color=green]
>> i have been slaving over the documentation now for hours trying to
>> figure
>> out how to set policies and so on.
>>[/color]
> Get the "poledit" addon, best from a w2k server cd, it's somewhere
> hidden.
> You have to put the ntconfig.pol into the netlogon share.
> However, since windows2k promotes active directory and group policies
> instead, it's a bit flakey and doesn't work perfectly (no bugfixing
> anymore
> since it's a leftover from NT4).[/color]

you wouldn't know about any resources on the internet where i can get this
program?
[color=blue]
>[color=green]
>> so i was just wondering if anybody could point in the right direction.
>>
>> I was talking with some bloke on irc. and he said all i had to do was to
>> make the linux account a super user account (uid=0 and gid=0) so i tried
>> that, but didn't work.
>>[/color]
> Uh. No, linux superuser has nothing in common with windows local admin
> role.
> Did the IRC buddies then joke around and sent you some binary niciety?
> ;-)
>[/color]

hehe. thanks mate. this is the best help i have recieved the last week!
happy new year!

netbrain wrote:

.....[color=blue]
> And all this information on pdbedit can i get in the man pages? And, yes
> im using samba 3.
>[/color]
Oh yes, there is a webpage: [url]http://localhost:901/swat/help/pdbedit.8.html[/url]
*eg*
[color=blue][color=green]
>> Get the "poledit" addon, best from a w2k server cd, it's somewhere
>> hidden.
>> You have to put the ntconfig.pol into the netlogon share.
>> However, since windows2k promotes active directory and group policies
>> instead, it's a bit flakey and doesn't work perfectly (no bugfixing
>> anymore
>> since it's a leftover from NT4).[/color]
>
> you wouldn't know about any resources on the internet where i can get this
> program?
>[/color]
It should be a part of NT4 servicepacks but you need to expand the stuff
somehow. Or mail me (wmautner<at>hotmail.com) if you can't find it
elsewhere.
Good luck!
--
Longhorn error#4711: TCPA / NGSCB VIOLATION: Microsoft optical mouse
detected penguin patterns on mousepad. Partition scan in progress
to remove offending incompatible products. Reactivate your MS software
(3 days grace period). [LinuxCounter#295241]