вобщем в домен вроде вогнал.
Теперь не могу настроить чтобы domain Admins  являлись так же админами компа

%LAN\\Domain^Admins ALL=(ALL) ALL

и ещё гемморой со сканером Canon LIDE100
то есть   

$ lsusb
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 002 Device 002: ID 09da:032b A4 Tech Co., Ltd
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 001 Device 006: ID 04a9:1904 Canon, Inc.
Bus 001 Device 003: ID 0bda:0151 Realtek Semiconductor Corp. Mass Storage Device (Multicard Reader)
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub


sane-find-scanner -q
found USB scanner (vendor=0x04a9, product=0x1904, chip=GL847?) at libusb:001:006

но в итоге

$ sudo scanimage -L

No scanners were identified. If you were expecting something different,
check that the scanner is plugged in, turned on and detected by the
sane-find-scanner tool (if appropriate). Please read the documentation
which came with this software (README, FAQ, manpages).