[Samba] how can a SYSTEM user access domain shares?

Tony Earnshaw tonye at billy.demon.nl
Fri Jun 17 09:57:36 GMT 2005


fre, 17.06.2005 kl. 11.15 skrev Tomasz Chmielewski:

[...]

> > i think that you can use the netlogon script
> 
> No, you didn't understand the problem (or I described it in a confusing 
> way).
> 
> Netlogon scripts are executed with permissions of a user that just logons.
> 
> So if "Joe" logons, this script will be executed as "Joe", and hence, no 
> software installation, as "Joe" is not privileged enough (he's not a 
> domain administrator for obvious reasons).

runas (standard Windows XP/2k)-> encryptedrunas. Google for
encryptedrunas - it's not freeware, though.

It will enable logon scripts using the runas-type commands, with an
encrypted system user password, so that other users can't use it.

--Tonni

-- 
mail: tonye at billy.demon.nl
http://www.billy.demon.nl




More information about the samba mailing list