Re: [Samba] Simple group question...
Regis Niggemann
regisn at techheads.com
Thu Jul 9 23:54:03 MDT 2009
Of course the problem with this method is you are granting that group admin
rights to all those computers. If a single account in that group with those
rights becomes infected with some malware, it is possible for that malware
to infect ALL the computers.
Just saying...
> If you have 500 computers to admin, how do you remove Tom's admin rights?
>
> The best way is:
>
> - Create a new domain group.
> - Add users to new domain group.
> - Add this new domain group to the local administrators group on each machine.
>
> Now, every user in "new domain group" will have admin rights in the computers.
>
> If for some reason you think John Doe does not need admin rights
> anymore, you just remove him from the "new domain group"
More information about the samba
mailing list