Re: [Samba] Simple group question...‏

Regis Niggemann regisn at techheads.com
Thu Jul 9 23:54:03 MDT 2009


Of course the problem with this method is you are granting that group admin
rights to all those computers.  If a single account in that group with those
rights becomes infected with some malware, it is possible for that malware
to infect ALL the computers.

Just saying...

 
> If you have 500 computers to admin, how do you remove Tom's admin rights?
> 
> The best way is:
> 
> - Create a new domain group.
> - Add users to new domain group.
> - Add this new domain group to the local administrators group on each machine.
> 
> Now, every user in "new domain group" will have admin rights in the computers.
> 
> If for some reason you think John Doe does not need admin rights
> anymore, you just remove him from the "new domain group"



More information about the samba mailing list