I would like to use the
shutdown /i command on Windows 7 to perform a remote shutdown of a Debian Linux box running Samba 4.5.12 and joined to a domain. SSSD 1.15.0 is also present. Every time I try to perform the shutdown (using a fairly privileged Windows domain user), I can lookup the server in the directory easily enough, but get an error with
Access Denied. (5)
According to 1, this means the user performing the shutdown needs to be an administrator of the target Linux machine with sufficient local privileges, but I don't know how to set it up. I think I need to somehow get a specific domain user into the (Samba) Local Administrators group or maybe delegate some unix group to a that domain group 2
I have tried to do the latter with:
net groupmap add ntgroup="Administrators" unixgroup=adm rid=512 type=d
There a unix user having username [bozo] in [adm] on the linux box with matching [domain\bozo] domain user.