Bug 11093 - User in Domain Admin Group not able to modify server share permissions from client Windows PC
Summary: User in Domain Admin Group not able to modify server share permissions from c...
Status: RESOLVED WORKSFORME
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.1.16
Hardware: x64 Linux
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-02-10 16:45 UTC by Mike (dead mail address)
Modified: 2021-01-06 14:32 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mike (dead mail address) 2015-02-10 16:45:45 UTC 
User in Domain Admin Group not able to modify server share permissions from client Windows PC.

SeDiskOperatorPrivilege has been granted to the Domain Admin group.  User in that group can not edit shares.

When logged into the client PC as the Domain Admin, I can edit the server share permissions.

Problem in propagating AD group membership?
Comment 1 Rowland Penny 2021-01-06 14:32:46 UTC 
Provided everything is set up correctly, this works for me on 4.13.2. Closing