On privileges

[simo]

On Sun, 2006-03-05 at 10:09 +0100, Volker Lendecke wrote:
> On Sat, Mar 04, 2006 at 06:58:04PM -0500, simo wrote:
> > I was wondering if we should give the Domain Admins all privileges by
> > default.
> > I think it would be a good idea to do so.
> 
> I would much rather give BUILTIN\Administrators all
> privileges. This then also covers the standalone case.
> 
> If 'winbind nested groups = yes', then the admin can choose
> whom to put into BUILTIN\Administrators.

If we can put Domain Admins by default into the BUILTIN/Administrators
group, then yes that's better.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org