On Saturday 27 September 2003 21:04, John H Terpstra wrote: > The only way that a domain user can gain admin priviliges ona domain > member workstation is through domain users or domain groups being made > members of a local workstation group that has sufficient rights and > privilige to do what needs to be done.
A "Domain User" yes, but a "Domain Admin" needs no such elevation. I think I said basically the same thing. > You are correct that the Domain Admins group should automatically become a > member of the local Administrators group when a workstation or server > becomes a domain member. > Normal users are of course not members of the Domain Admins group by > default. By default a normal domain user has no rights on a workstation > except as permitted by the permissions and rights afforded by whatever > group the domain user is in, and the resulting rights that user has on the > workstation. Maybe I'm mistaken then, I thought the crux of the biscuit was about Domian Admins and not Domain Users. Apologies if I misunderstood. Chris -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
