Make Admins be admin users
abartlet at samba.org
Thu Feb 20 10:40:20 GMT 2003
On Thu, 2003-02-20 at 21:29, Ken Cross wrote:
> You've a valid point that the domain isn't checked (although it's
> probably still correct for Enterprise Admins).
> The idea was to do it automatically. Adding Domain Admins to admin
> users in smb.conf would have the correct results unless somebody forgets
> to do it. This is especially true if the domain changes. Hence the
> Since we're trying to emulate a Windows environment, Windows admins
> expect to have certain privileges. Is there a better way to do this
Well, I assume your smb.conf file is automatically generated to some
extent, so just extend that. (I assume you set 'workgroup' from some
other interface, for example).
However, NT admins do not have 'root' power over their system. That is
reserved for 'System'. NT admins have their power due to ACLs and
privileges. The privileges part is being worked on, but a more limited
hack has been employed by other NAS vendors to give 'change ownership'
permissions. The rest is up to what ACLs you set on your file system.
Andrew Bartlett abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team abartlet at samba.org
Student Network Administrator, Hawker College abartlet at hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030220/35b42de4/attachment.bin
More information about the samba-technical