svn commit: samba r6008 - in trunk/source/rpc_server: .

[John H Terpstra]

On Wednesday 23 March 2005 16:11, Gerald (Jerry) Carter wrote:
> Simo Sorce wrote:
> | I'm going to change the code to explicitly test for
> | root or Domain Admins right now (should we test for
> | BUTILIN/Administrators ? IMHO yes but maybe in future).
>
> Keep it simple for now. Just root and Domain Admins.

I believe that full administrative privilege should be afforded by default to:

1. root and 'Domain Admins' on a stand-alone server
2. root and 'Domain Admins' on a DC
3. 'Domain\root', root, and 'Domain Admins' on all Domain Member 
Server/Clients

The use of user rights and privileges should be necessary only for groups and 
users other than the above.

- John T.