enable privileges

This deprecated parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either net rpc rights or one of the Windows user and group manager tools. This parameter is enabled by default. It can be disabled to prevent members of the Domain Admins group from being able to assign privileges to users or groups which can then result in certain smbd operations running as root that would normally run under the context of the connected user.
An example of how privileges can be used is to assign the right to join clients to a Samba controlled domain without providing root access to the server via smbd.
Please read the extended description provided in the Samba HOWTO documentation.

Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

enable privileges
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Samba\smb_conf\enable privileges
Value Nameenable privileges
Value TypeREG_DWORD
Default Value1
True Value1
False Value0

samba.admx

Administrative Templates (Computers)