[Samba] Administrators and Users Rights for Windows workstations

Louis van Belle louis at van-belle.nl
Thu Sep 1 14:40:17 GMT 2005


just disable the administrative shares.

but why give users Administrator rights thats stupid.

but use poledit and policy templates to disabled the c$ 
You can find the nessesary templates in the samba list.
there's a link 2 a packages with howto examples policy templates
etc.


Louis 

>-----Oorspronkelijk bericht-----
>Van: samba-bounces+louis=van-belle.nl at lists.samba.org 
>[mailto:samba-bounces+louis=van-belle.nl at lists.samba.org] 
>Namens Edgar Fonseca
>Verzonden: donderdag 1 september 2005 16:24
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] Administrators and Users Rights for Windows 
>workstations
>
>Hello,
>
>I having a problem with rights in Windows workstations. I want 
>that all 
>users can be administrators of yours stations when they are 
>logged in your 
>stations, but I don't want that they can see the share C$ of 
>other stations. 
>They can see this because they are administrators of the domain.
>They have primary group "Domain Admins". If I try put the users on 
>"Administrators" group, they can't logon. If I try put them on "Domain 
>Users" group, they aren't administrators. If I put them in 
>"Administrators" 
>(primary group) and "Domain Users", they aren't 
>administrators. The only 
>possibility for the users log as administrators is that they 
>are inserted in 
>"Domain Admins" group.
>The problem is the C$. We thinking about use a script to 
>remove this share 
>from Windows, but I'm not sure about if this solution is the best.
>Does someone know about any solution for this problem?
>
>I'm using samba 3.0.14 + LDAP
>
>Thanks
>
>Edgar
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>



More information about the samba mailing list