[Samba] Running GPMC with a user who is a member of Domain Admins

[L.P.H. van Belle]

Because a "user" is not an "administrator" 
You should not "work" with Adminsitrator rights, thats more what i mean. 

Keep this separated. 

I work on my network as user XXXXX.. 
if i must do Administrative tasks, i login as Administrator. 

also, if you working while your administrator, it's really easy to get "garbage" on you pc, which now can install it self also, because it already has administrator rights. 

Thats what i mean, i hope thats clear. 
its only a safety thing, has nothing todo with samba in general. 

> -----Oorspronkelijk bericht-----
> Van: Roy Eastwood [mailto:spindles7 at gmail.com]
> Verzonden: dinsdag 6 april 2021 17:48
> Aan: 'L.P.H. van Belle'; samba at lists.samba.org
> Onderwerp: Running GPMC with a user who is a member of Domain Admins
> 
> Hi Louis,
> On 06 April 2021 15:45 L.P.H. van Belle wrote:
> > so, im asuming this was en "user" with elevated rights that runned GPMC
> > and created the policies, or a user which was added to "domain admins"
> which is a big NO NO..
> 
> Can you elaborate why you say running GPMC by a user who is a member of
> Domain Admins is a "big NO NO" please?
> 
> Thanks,
> Roy


Greetz, 

Louis