[Samba] disable automatic creation of computer accounts
Angel Bosch Mora
abosch at imasmallorca.net
Tue Oct 26 14:07:29 UTC 2021
>
> I think delegation is what should be doing. Do all the wiki [1] page
> says but don't add the permission to create new Computer objects,
> that
> way the users that had the delegation active could only join machines
> named as previously created machines.
>
> This need that users that join the machines munt not be full
> administrators, and that is always the best security practice anyway.
>
> [1]
> https://wiki.samba.org/index.php/Delegation/Joining_Machines_to_a_Domain
>
that is exactly what I was looking for.
thanks a lot Robert, I'll do some tests and will give an update.
abosch
-- Institut Mallorqui d'Afers Socials. Aquest missatge, i si escau, qualsevol fitxer annex, es dirigeix exclusivament a la persona que n'es destinataria i pot contenir informacio confidencial. En cap cas no heu de copiar aquest missatge ni lliurar-lo a terceres persones sense permis expres de l'IMAS. Si no sou la persona destinataria que s'hi indica (o la responsable de lliurar-l'hi) us demanam que ho notifiqueu immediatament a l'adreca electronica de la persona remitent. Abans d'imprimir aquest missatge, pensau si es realment necessari.
More information about the samba
mailing list