samba: acl's for machines outside the domain
 

Hi all,

I try to set up a samba server for some win2k clients. I don't want to act samba as domain controller for the clients, but they should be able to create/modify user/group access permissions for users/groups stored on the samba machine.

Given ACL's are shown correct in the win clients, but I cannot create a new user or group permission. If I try, windows asks for login information and complains about lacking privileges on the domain server.

Is it possible to allow windows clients to create new user/group permissions, _without_ forcing the client machine to join the domain?

Thanks a lot,
Clemens