Trivial one, With net rpc rights grant; one can specify more than one right on the command line: net rpc -U Administrator%password rights grant Administrator SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Successfully granted rights. With net sam rights grant; only one right can be specified: net sam rights grant Administrator SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege usage: net sam rights grant <name> <right> I know this can be achieved with a simple xargs but it would be nice for a little consistency.
David, would you like to provide a patch?
Leave it with me.
Created attachment 4297 [details] fix that has been pushed to master, should also apply to 3.4
Volker, something we would like to have in 3.4 ?
Certainly very low risk, and we're not yet at RC1 :-) Does this need to be documented somewhere? Volker
(In reply to comment #5) > Certainly very low risk, and we're not yet at RC1 :-) > > Does this need to be documented somewhere? Well, surprisingly net sam rights is not documented in manpage at all :-)
Okay, that makes it easy :-) Volker
Created attachment 4298 [details] for grant+revoke
Created attachment 4299 [details] patch for 3.4 (combines grant and revoke with net sam rights for multiple rights) This should be the final patch for this (maybe docs to follow - but net sam rights wasnt documented at all before).
Pushed documentation for 'net sam rights' (commit e912764a in master).
Comment on attachment 4299 [details] patch for 3.4 (combines grant and revoke with net sam rights for multiple rights) Looks good, although I'd have preferred it without the reformatting changes. Next time please :-) Volker
Karolin, please push to 3.4.
Pushed, will be included in 3.4.0. Closing out bug report. Thanks!
Created attachment 4307 [details] for grant+revoke
oops, ignore that.