attempting to change NT-access-permisions to find out why create-alias

fails against a workstation's SAM.

diff --git a/source/rpcclient/cmd_samr.c b/source/rpcclient/cmd_samr.c
index 80eb9baeeefe199e23fe48848a9e477859c1a5c7..9004c823a5f15de18f98a04790836c12fa54eb32 100644 (file)
--- a/source/rpcclient/cmd_samr.c
+++ b/source/rpcclient/cmd_samr.c
@@ -1294,7 +1294,7 @@ void cmd_sam_create_dom_alias(struct client_info *info, int argc,
        DOM_SID sid1;
        BOOL res = True;
        BOOL res1 = True;
-       uint32 ace_perms = 0x02000000;  /* permissions */
+       uint32 ace_perms = 0x200003d3;  /* permissions */
        uint32 alias_rid;
        POLICY_HND sam_pol;
        POLICY_HND pol_dom;