[Samba] Samba users as local workstation admins?
CMarcus at Media-Brokers.com
Thu Apr 3 15:27:00 GMT 2008
On 4/3/2008 9:19 AM, armin walland wrote:
> On Thursday 03 April 2008 15:13, Christopher Perry wrote:
>> We have a problem, which is that several of our users are local admins
>> on their own workstations. We'd like to let them retain these rights,
>> but we're switching to a PDC. Is there a way to have them authenticate
>> to the domain, and as a regular user, but on the Windows workstation
>> have full control? What's the best solution for this? I obviously don't
>> want to make them domain Admins.
> we had the same requirement and just locally added "Domain Users" to the
> local "Administrators" group on all clients.
I created a new group 'Local Admins', and only added *that* group to the
local 'Administrators' group on each workstation...
Most people not only don't *need* local admin privs, most people
*should* *not* have local admin privs...
I do add the 'Domain Users' group to the local 'Power Users' group
though, which is almost as bad, but some of our apps just won't work
right without Power User privs... :(
More information about the samba