- For individual users
- Instant access to solutions
- Ask your tech questions
- Start your 30-day Free Trial
Main Topics
Browse All TopicsDear Experts:
I am having rhel5 working as a samba domain controller by default all the unix users are members of Domain Users of windows , i am looking for a config a group of users should be added to the power users group of windows this can be done manually from the client compuet but i have around 100 plus users hence if it can be done through the samba config it will be a great help , please help. thanks in advance
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: it4sohoPosted on 2009-08-14 at 11:02:52ID: 25100645
Good news... you can easily create a domain group that multiple users can belong to, and you can call it "Domain Power Users"....
Bad news... the "Power Users" group on each domain computer is a "local" group, not a domain one... so you'll need to add the "Domain Power Users" group to the local "Power Users" group....
Good News... when your XP or Vista system joins the domain, two mappings already occur:
- The Domain Admins group is added to the local "Administrators" group, and
- The Domain Users group is a "special" group that is supposed to have essentially the same capabilities as "Power Users"
So... long story short: you can create a domain group & add it (the domain group) to each local system's Power Users group. There MAY be a way to do that in a login script, but I've never tried it. But, it may all be moot, as the Domain Users group may already have the permissions you seek.
All that aside, if your Domain Server is Samba, then you do HAVE to make the Domain Admins & Domain Users ID's actually match the "Microsoft Reserved" IDs for those users.
# Create your POSIX groups
addgroup -f -g 512 admins
addgroup -f -g 513 users
addgroup -f -g 553 computers
# map the groups to the "Domain" groups
net groupmap add ntgroup="Domain Admins" unixgroup=admins rid=512 type=d
net groupmap add ntgroup="Domain Users" unixgroup=users rid=513 type=d
net groupmap add ntgroup="Domain Computers" unixgroup=computers rid=553 type=d
[NOTE to other experts: not ALL of these are technically REQUIRED... but I'm following "best practices", so they should all be done this way... at least IMHO].
That should do it!
Good Luck!
Dan
IT4SOHO