Re: [Samba] Simple group question...
regisn at techheads.com
Thu Jul 9 23:54:03 MDT 2009
Of course the problem with this method is you are granting that group admin
rights to all those computers. If a single account in that group with those
rights becomes infected with some malware, it is possible for that malware
to infect ALL the computers.
> If you have 500 computers to admin, how do you remove Tom's admin rights?
> The best way is:
> - Create a new domain group.
> - Add users to new domain group.
> - Add this new domain group to the local administrators group on each machine.
> Now, every user in "new domain group" will have admin rights in the computers.
> If for some reason you think John Doe does not need admin rights
> anymore, you just remove him from the "new domain group"
More information about the samba