I have this setup :
- samba 3.4.8 32bits running on a Mandriva Linux 2010.0
- accounts and groups are in LDAP
I needed to have the "administrateur" user to be domain administrator.
So I added the options :
admin users = administrateur
in smb.conf inside the [global] section.
My users are able to login on domain members WindowsXP machines.
But they are all recognised by Samba as root users : created files or directories have owner root and users have access to every files on shares, because they are all root.
I changed the configuration parameter to a group instead of a user:
admin users = @administrateurs
My users are now all normal users, and the members of "administrateurs" group have all root access to shares.
So it works correctly with a group.
Samba's documentation says that the "admin users" parameter can be set to either users and groups.