[Samba] Samba users as local workstation admins?

[Charles Marcus]

On 4/3/2008 9:19 AM, armin walland wrote:
> On Thursday 03 April 2008 15:13, Christopher Perry wrote:
>> We have a problem, which is that several of our users are local admins
>> on their own workstations. We'd like to let them retain these rights,
>> but we're switching to a PDC. Is there a way to have them authenticate
>> to the domain, and as a regular user, but on the Windows workstation
>> have full control? What's the best solution for this? I obviously don't
>> want to make them domain Admins.

> we had the same requirement and just locally added "Domain Users" to the 
> local "Administrators" group on all clients.

Gack!

I created a new group 'Local Admins', and only added *that* group to the 
local 'Administrators' group on each workstation...

Most people not only don't *need* local admin privs, most people 
*should* *not* have local admin privs...

I do add the 'Domain Users' group to the local 'Power Users' group 
though, which is almost as bad, but some of our apps just won't work 
right without Power User privs... :(

-- 

Best regards,

Charles