[Samba] Administrators and Users Rights for Windows workstations
Louis van Belle
louis at van-belle.nl
Thu Sep 1 14:40:17 GMT 2005
just disable the administrative shares.
but why give users Administrator rights thats stupid.
but use poledit and policy templates to disabled the c$
You can find the nessesary templates in the samba list.
there's a link 2 a packages with howto examples policy templates
>Van: samba-bounces+louis=van-belle.nl at lists.samba.org
>[mailto:samba-bounces+louis=van-belle.nl at lists.samba.org]
>Namens Edgar Fonseca
>Verzonden: donderdag 1 september 2005 16:24
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] Administrators and Users Rights for Windows
>I having a problem with rights in Windows workstations. I want
>users can be administrators of yours stations when they are
>logged in your
>stations, but I don't want that they can see the share C$ of
>They can see this because they are administrators of the domain.
>They have primary group "Domain Admins". If I try put the users on
>"Administrators" group, they can't logon. If I try put them on "Domain
>Users" group, they aren't administrators. If I put them in
>(primary group) and "Domain Users", they aren't
>administrators. The only
>possibility for the users log as administrators is that they
>are inserted in
>"Domain Admins" group.
>The problem is the C$. We thinking about use a script to
>remove this share
>from Windows, but I'm not sure about if this solution is the best.
>Does someone know about any solution for this problem?
>I'm using samba 3.0.14 + LDAP
>To unsubscribe from this list go to the following URL and read the
More information about the samba