[Samba] admin privileges on a single domain machine

[John Schmerold]

We assume the local machine is insecure. We put following in system 
login script:

\\fs1\sys\public\cpau /profile /u administrator /p publicpw /ex "net 
localgroup administrators domain\%username% /add"

This batch file has the effect of adding the domain user to local 
machine's administrator group, keeps things working well.

cpau can be downloaded from: http://www.joeware.net/win/free/tools/cpau.htm

-- 
John Schmerold
Katy Computer & Wireless
20 Meramec Station Rd
Valley Park MO 63088
636-861-6900 v
775-227-6947 f 



Daniel Wilson wrote:

> You must add the user's account to the local administrators group. This
> cant be done in LDAP as i believe.
> Right click on "My Computer", then manage>users and group>groups>right
> click on administrator>add>etc...
>
> Mario Ohnewald wrote:
>
>> Hello List!
>>
>> I have a ldap based samba pdc with a few windows xp prof clients and 
>> a few
>> user accounts.
>>
>> All the users have Domain User permissions.
>>
>> Is it possible to give a Domain User admin privileges on a single box?
>>
>> Lets say i have Machine A, B, C and D. Then user Foo should have normal
>> Domain User Priviles when he logs into A, B and C. BUT when he logs into
>> Machine D, he should have admin privileges.
>>
>> Is that somehow possible?
>>
>>
>> Thanks, Mario
>>
>>
>>  
>>
>