[Samba] local admin rights for roaming profiles

[Michael Heydon]

...

> The another reason is to i dont wanna give local admin privileges to all the users!  (some users are extremly dangerous with local admin permissions).

> how can i provide that admin privileges only to access the app shared on \\SAMBASERVER\shared .

CPAU might do what you want, but it isn't terrific from a security point of view. I had a similar problem and in the end the simplest solution was to create a domain group called "Local Admins" and then add that to the local administrators group on each PC.

--

Michael Heydon
IT Administrator