[Samba] local admin rights for roaming profiles

Michael Heydon Michael.Heydon at jasonwindows.com.au
Sun Aug 8 20:33:12 MDT 2010


> The another reason is to i dont wanna give local admin privileges to all the users!  (some users are extremly dangerous with local admin permissions).

> how can i provide that admin privileges only to access the app shared on \\SAMBASERVER\shared .

CPAU might do what you want, but it isn't terrific from a security point of view. I had a similar problem and in the end the simplest solution was to create a domain group called "Local Admins" and then add that to the local administrators group on each PC.


Michael Heydon
IT Administrator

More information about the samba mailing list