[Samba] After Upgrading to rc4 (and still with 3.0.0) havingGroupmap problems.

Chris Smith chris at realcomputerguy.com
Sun Sep 28 02:10:43 GMT 2003


On Saturday 27 September 2003 21:04, John H Terpstra wrote:

> The only way that a domain user can gain admin priviliges ona domain
> member workstation is through domain users or domain groups being made
> members of a local workstation group that has sufficient rights and
> privilige to do what needs to be done.

A "Domain User" yes, but a "Domain Admin" needs no such elevation. I think I 
said basically the same thing.
 
> You are correct that the Domain Admins group should automatically become a
> member of the local Administrators group when a workstation or server
> becomes a domain member.

> Normal users are of course not members of the Domain Admins group by
> default. By default a normal domain user has no rights on a workstation
> except as permitted by the permissions and rights afforded by whatever
> group the domain user is in, and the resulting rights that user has on the
> workstation.

Maybe I'm mistaken then, I thought the crux of the biscuit was about Domian 
Admins and not Domain Users. Apologies if I misunderstood.

Chris



More information about the samba mailing list