Samba PDC and permissions
 

Hey all.. I have samba (FC5, ver 3.0.24) running as a PDC on my server. Users are able to authenticate fine with the server, as well as get their roaming profile. The only catch is that if the user trying to login has no LOCAL admin account on the PC they are using to log into the domain, they are VERY restricted (ie: cannot change background, theme, unlock the taskbar, etc. The users in question are in the group "users," which is net groupmapped as follows:

Domain Users (S-1-5-21-3146726387-3788954289-1565107996-1015) > users

If the user has a local admin account on the PC they are using, everything works flawlessly...however they have admin rights to everything...which I'm not crazy about. I know there are a lot of people out there who have setup samba PDC's with roaming profiles correctly. Let me know if you have any suggestions. When I get home, I can post more info from my server if needed. Thanks!

what you could do is this:

on each xp client add the "Domain Users" group to the local "Power Users" group. this will give your users some more rights without having to give them local admin rights. if you still need to give some of them local admin rights, add them to the ntadmin linux group and use 'net groupmap' to map the "Domain Admins" group to the 'ntadmin' linux group.

a hint for roaming profiles: jpeg background images won't roam as they are stored in "local settings" for some weird reasons. bmp images work.