[Samba] best practice for domain admins

[Stefan G. Weichinger]

Am 07.08.19 um 13:41 schrieb L.P.H. van Belle via samba:
> Good one Norbert, 
> 
> And this is exacly as im doing my software installs. 
> My collega finds it very annoying. :-) 
> 
> I also added ( through GPO ) that, once your logged in the Domain, all software add/remove functions are disabled, even for Domain admins,
> only "local - pc admins"  can install software. 

This might get annoying if I deploy MS LAPS: separate admin-pw per PC.

So I have to decide here ... (or roll out the same local-admin-pwd
everywhere).