If this is set to <constant>yes</constant> the program specified in the <parameter moreinfo="none">passwd
program</parameter> parameter is called <emphasis>AS ROOT</emphasis> -
to allow the new UNIX password to be set without access to the
- old UNIX password (as the SMB password change code has no
- access to the old password cleartext, only the new).</para>
+ old UNIX password (as the SMB password change code has no
+ access to the old password cleartext, only the new).</para>
+
+ <para>This option has no effect if <command moreinfo="none">samba</command>
+ is running as an active directory domain controller, in that case have a
+ look at the <command moreinfo="none">samba-tool user syncpasswords</command> command.</para>
</description>
<related>passwd program</related>