[Samba] Samba4 and sysvol share

[felix at epepm.cupet.cu]

> On 27/09/2011 13:07, felix at epepm.cupet.cu wrote:
>> Hello.
>> I noticed that any domain user can delete the content of the shared
>> folder
>> sysvol in the domain controller from a windows client.
>>
>> How can I avoid that?
>>
>> Greetings,
>> Felix
>>
> What's the default windows behavior with this ?
>
> Matthieu.
>
Windows users              Windows permissions
-------------------------------------------------
Domain Admins-----------> Full Access
Authenticated User------> Read & Execute, List folder contents, Read
CREATOR OWNER-----------> Special permissions (Maybe we don't need this)
Server Operators--------> Read & Execute, List folder contents, Read
SYSTEM------------------> Full Access

Thanks for your attention.
Felix.