On privileges

simo idra at samba.org
Sun Mar 5 15:41:58 GMT 2006

On Sun, 2006-03-05 at 10:09 +0100, Volker Lendecke wrote:
> On Sat, Mar 04, 2006 at 06:58:04PM -0500, simo wrote:
> > I was wondering if we should give the Domain Admins all privileges by
> > default.
> > I think it would be a good idea to do so.
> I would much rather give BUILTIN\Administrators all
> privileges. This then also covers the standalone case.
> If 'winbind nested groups = yes', then the admin can choose
> whom to put into BUILTIN\Administrators.

If we can put Domain Admins by default into the BUILTIN/Administrators
group, then yes that's better.


Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org

More information about the samba-technical mailing list