Administrative tasks on UNIX/Linux systems, such as adding users or groups, requires root-level privilege. The addition of a Windows client to a Samba domain involves the addition of a user account for the Windows client.

Many UNIX administrators continue to request that the Samba Team make it possible to add Windows workstations, or the ability to add, delete, or modify user accounts, without requiring root privileges. Such a request violates every understanding of basic UNIX system security.

There is no safe way to provide access on a UNIX/Linux system without providing root-level privileges. Provision of root privileges can be done either by logging on to the Domain as the user root or by permitting particular users to use a UNIX account that has a UID=0 in the /etc/passwd database. Users of such accounts can use tools like the NT4 Domain User Manager and the NT4 Domain Server Manager to manage user and group accounts as well as domain member server and client accounts. This level of privilege is also needed to manage share-level ACLs.