[Samba] Making users local administrators

[Novosielski, Ryan]

Well, if you must allow them to have this access, I would make it through a separate account. There is no good reason to have users logging in daily as Administrator anymore. 

Trouble with mailing lists: you will get an opinion on what you're doing, want it or not. 


----- Original Message -----
From: Terry Austin [mailto:terry at crownhardware.com]
Sent: Thursday, March 21, 2013 11:24 AM
To: L.P.H. van Belle <belle at bazuin.nl>
Cc: samba at lists.samba.org <samba at lists.samba.org>
Subject: Re: [Samba] Making users local administrators

On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote:

> DONT DO IT !!  
> 
> This is Administrators 1ste rule !! 
> NEVER, but then NEVER giver users Administrator/PowerUser rights. 

I have no choice. There's too much stuff out of my control that requires 
the daily user have admin rights locally.

Plus, we've beeing doing it this way for 15 years, and have never had any 
serious issues.

> Its simpel, without Admin rights on users, you pc is about 90% more safer. 
> if you also remove flash java adobe, you are about 99,5% safe. 

In our case, they'd be 100% safer because we'd be out of business. If I 
don't keep things working, my replacement will.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba