[Samba] Making users local administrators
Gerry Reno
greno at verizon.net
Thu Mar 21 06:14:28 MDT 2013
On 03/21/2013 05:29 AM, L.P.H. van Belle wrote:
> DONT DO IT !!
>
> This is Administrators 1ste rule !!
> NEVER, but then NEVER giver users Administrator/PowerUser rights.
>
> Do not give the users ability to install software, wrong wrong...
>
> This is you trojans/Virussus etc come in your computer.
>
> and if you do give these rights,
> Do not install Adobe Flash, Adobe Reader, Java. ( especialy Java )
>
>
> Its simpel, without Admin rights on users, you pc is about 90% more safer.
> if you also remove flash java adobe, you are about 99,5% safe.
>
> If you have an application which needs extra rights.
> Do it save, how...
>
> 1 create a network group voor this App.. example PHOTOSHOPRIGHTS
>
> Set in het registry, on the photoshop, the domain group to able to write.
> ( if needed, us a monitor tool to look which registry things need write access )
>
> Set on the folder ) c:\program files\Photoshop ) the domain group to write.
>
> Now you have a hole on the pc, but no trojan/virus is able to install itself.
>
> Good luck.
>
> Louis
>
>
I would agree, Louis.
Giving out local admin rights is pretty much sysadmin suicide.
-Gerry
More information about the samba
mailing list