[Samba] Making users local administrators

[Michael Leone]

On Thu, Mar 21, 2013 at 11:43 AM, Gregory Sloop <gregs at sloop.net> wrote:

> ML> Well, it's a lot more work, but you could use the Windows utilities
> ML> FILEMON and REGMON to monitor what file and registry access your
> ML> applications require on the local machine, and then grant the local
> ML> user access to just those needed items, rather than across-the-board
> ML> full local administrator access.
>
> For goodness sake.
>
> I think it's appropriate to remember that the networks and
> workstations were put there, NOT for the enjoyment and ability of
> network admins to insist on technical purity and "rightness," but to
> get work done.
>
> If "technical purity" becomes the paramount focus, IMO, we're doing it
> wrong.
>
> Finally, sometimes political considerations, among others also
> outweigh technical purity. And frankly, given the environment and time
> constraints, it may be MORE work and cost to figure out what's needed
> to not allow local admin privs.
>
> So, please. Go ahead and warn if you like, but offer some help, don't
> just abuse the poster for making a decision that's practical for their
> particular situation.

I, for one, was not "abusing" anyone. I was offering alternatives to a
user who may or may not know of them. Not everyone is conversant with
all utilities or practices, especially cross-platform.


-- 

2B || !2B