Samba User Privileges

[terry123b99]

Hi,

Was hoping someone here could help, I have spent the last few weeks trying to figure out where I have gone wrong. In a nutshell am running Samba as a PDC on my Fedora Core 5 box. All domain logins work great, for the exception that none of the users have admin privileges so I can't install any software on my Windows XP clients when logged in as a domain user.

Here is my smb.conf file (if its any use)

# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2006/10/30 16:16:56

[global]
workgroup = TECHZONE
netbios name = EAGLE
server string = Samba Linux Server
username map = /etc/samba/smbusers
time server = Yes
logon script = %U.bat
logon drive = t:
logon home = \\eagle\home\%u
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
ldap ssl = no
admin users = root, admin, administrator, @terry, @root, terry, terryj, terryjones, super

[netlogon]
comment = Server Logon Service
path = /usr/local/samba/netlogon
valid users = root

[dump]
comment = Global Share
path = /dump
valid users = root, admin, administrator
read list = root, admin, administrator
write list = root, admin, administrator, @terry, @root, terry, terryj, terryjones, super
read only = No
guest ok = Yes

[nt roaming profiles]
comment = NT Roaming Profiles
path = /samba/profiles
force user = %U
read only = No
create mask = 0600
directory mask = 0700
profile acls = Yes
root preexec = /etc/samba/scripts/mk_sambadir"/samba/profiles/%U" "%U" "%g"

If you need any more info just let me know.

Thanks in advance

[gtmtnbiker98]

Create local admin privileges for the users that need to install software.

[terry123b99]

Create local admin privileges for the users that need to install software.

am assuming that you mean local as in my Windows XP clients not the samba server. I have logged in Locally to this machine as an administrator and created a new account named root with same password to that on the samba server and added it to the administrators group but still have no joy.

Could there be something am doing wrong here?

cheers

[gtmtnbiker98]

When working with domain accounts, under Control Panel click on User Accounts and add the appropriate domain accounts and set their privilege level this way. This will allow for domain logons without the need to logon locally.