On privileges

[simo]

On Sun, 2006-03-05 at 16:57 +0100, Volker Lendecke wrote:
> On Sun, Mar 05, 2006 at 10:41:58AM -0500, simo wrote:
> > If we can put Domain Admins by default into the BUILTIN/Administrators
> > group, then yes that's better.
> 
> If 'winbind nested groups = no', this is already done. If
> 'winbind nested groups = yes', we could do this at join time
> like Windows does. It is not yet done however.
> 
> And I'd like to leave that to the admin to be honest.

Well, I was thinking the DC case.
But as Windows does that by default on domain joins,
I think admins would welcome to have a similar "expected" behavior from
samba.

Simo.


-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org