samba-users May 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: Re: [Samba] net rpc rights grant root SeDiskOperato

Re: [Samba] net rpc rights grant root SeDiskOperatorPrivilege failed with "Failed to grant privileges for root (NT_STATUS_ACCESS_DENIED)"

From: Nagaraj Shyam <Nagaraj_Shyam_at_nospam>
Date: Thu May 13 2010 - 18:58:27 GMT
To: "zoolook" <nbensa@gmail.com>

Hi zoolook.

 

Thanks for the reply.

 

In my case I had got the command to work when the samba server was standalone.

 

I just figured out that I need to provide the domain admin password to change privileges if samba server has joined a domain ...

 

-s

 

From: zoolook [mailto:nbensa@gmail.com]
Sent: Thursday, May 13, 2010 6:02 AM
To: Nagaraj Shyam
Cc: samba@lists.samba.org
Subject: Re: [Samba] net rpc rights grant root SeDiskOperatorPrivilege failed with "Failed to grant privileges for root (NT_STATUS_ACCESS_DENIED)"

 

You need to tell net with which user you run the command:

net rpc rights grant USERNAME SeDiskOperatorPrivilege -Uroot

HTH,
Norberto

        El 13/05/2010 9:53, "Nagaraj Shyam" <Nagaraj_Shyam@symantec.com> escribió:
        
        Hi,
        
        
        
        I have a samba server setup as a domain member. I am trying to grant
        SeDiskOperatorPrivilege to some user accounts e.g. "domainaname\User",
        but I always get the above error. It doesnot matter what I specify as
        the server in -S option to the command. The command syntax I use is:
        
        
        
        net rpc rights grant "username" SeDiskOperatorPrivilege
        
        
        
        OR
        
        
        
        net -S ADserver -U support rpc rights grant 'domain\Administrator'
        SeDiskOperatorPrivilege
        
        
        
        I am trying to grant the above privilege because managing samba shares
        through mmc from remote windows system is failing with:
        
        
        
        _srvsvc_NetShareSetInfo: uid 10500 doesn't have the
        SeDiskOperatorPrivilege privilege needed to modify share myshare
        
        
        
        
        
        Uid 10500 is 'domain\Administrator' account
        
        
        
        I can send the relevant smb.conf and any additional traces I need to
        capture. Can anyone provide ideas on what could be going wrong? The
        above feature(s) is supposed to be supported by samba 3.5.1 which I am
        using.
        
        
        
        Thanks for the help.
        
        
        
        -s
        
        --
        To unsubscribe from this list go to the following URL and read the
        instructions: https://lists.samba.org/mailman/options/samba

-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba