Please note that every Windows NT4 and later server requires a domain Administrator account. Samba versions commencing with 3.0.11 permit Administrative duties to be performed via assigned rights and privileges (see User Rights and Privileges). An account in the server's passdb backend can be set to the well-known RID of the default administrator account. To obtain the domain SID on a Samba domain controller, run the following command:

root#  net getlocalsid
SID for domain FOO is: S-1-5-21-4294955119-3368514841-2087710299

You may assign the domain administrator RID to an account using the pdbedit command as shown here:

root#  pdbedit -U S-1-5-21-4294955119-3368514841-2087710299-500 -u root -r