Re: [Samba] Simple group question...‏

[Norberto Bensa]

On Fri, Jul 10, 2009 at 2:18 AM, suphakit at gmx.com<suphakit at gmx.com> wrote:
> Hi,
> This works for me ,you can try.
>
> After join computer to domain  then log on to Windows Xp with local
> administrator account and go to control panel -> addusers (select
> account from your domain) -> Grant access level to your domain account
> as "Administrator".
>

That's the admin nightmare :-)

If you have 500 computers to admin, how do you remove Tom's admin rights?

The best way is:

- Create a new domain group.
- Add users to new domain group.
- Add this new domain group to the local administrators group on each machine.

Now, every user in "new domain group" will have admin rights in the computers.

If for some reason you think John Doe does not need admin rights
anymore, you just remove him from the "new domain group"