AW: [Samba] Administrators and Users Rights for Windows workstations

[Dirk.Laurenz at fujitsu-siemens.com]

Hi,
 
it's simple:
1.) put all users in YOURDOMAIN\Domain Users or YOURDOMAIN\Workstation Admins or what you would like
2.) put this group (YOURDOMAIN\Domain Users, YOURDOMAIN\Workstation Admins) into the local group
    Administrators of each Workstation (you may use vbscript to automate this...)
 
Mit freundlichem Gruß, 


Dirk Laurenz 
Systems Engineer        
PSO - Professional Service Organisation 
Fujitsu Siemens Computers 
Hildesheimer Strasse 25 
30880 Laatzen 
Germany 
Telephone:      +49 (511) 84 89 - 18 08 
Telefax:        +49 (511) 84 89 - 25 18 08 
Mobile: +49 (170) 22 10 781 
Email:  mailto:dirk.laurenz at fujitsu-siemens.com 
Internet:       http://www.fujitsu-siemens.com 
            http://www.fujitsu-siemens.de/rl/servicesupport/itdienstleistungen/competencecenter.html 
******************************************************************************************************************* 

________________________________

Von: samba-bounces+dirk.laurenz=fujitsu-siemens.com at lists.samba.org im Auftrag von Edgar Fonseca
Gesendet: Do 01.09.2005 16:23
An: samba at lists.samba.org
Betreff: [Samba] Administrators and Users Rights for Windows workstations



Hello,

I having a problem with rights in Windows workstations. I want that all
users can be administrators of yours stations when they are logged in your
stations, but I don't want that they can see the share C$ of other stations.
They can see this because they are administrators of the domain.
They have primary group "Domain Admins". If I try put the users on
"Administrators" group, they can't logon. If I try put them on "Domain
Users" group, they aren't administrators. If I put them in "Administrators"
(primary group) and "Domain Users", they aren't administrators. The only
possibility for the users log as administrators is that they are inserted in
"Domain Admins" group.
The problem is the C$. We thinking about use a script to remove this share
from Windows, but I'm not sure about if this solution is the best.
Does someone know about any solution for this problem?

I'm using samba 3.0.14 + LDAP

Thanks

Edgar
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba <https://pdbvpn1.fujitsu-siemens.com/https/0/lists.samba.org/mailman/listinfo/samba>