On 4/3/2008 9:19 AM, armin walland wrote:
On Thursday 03 April 2008 15:13, Christopher Perry wrote:
We have a problem, which is that several of our users are local admins
on their own workstations. We'd like to let them retain these rights,
but we're switching to a PDC. Is there a way to have them authenticate
to the domain, and as a regular user, but on the Windows workstation
have full control? What's the best solution for this? I obviously don't
want to make them domain Admins.
we had the same requirement and just locally added "Domain Users" to the
local "Administrators" group on all clients.
Gack!
I created a new group 'Local Admins', and only added *that* group to the
local 'Administrators' group on each workstation...
Most people not only don't *need* local admin privs, most people
*should* *not* have local admin privs...
I do add the 'Domain Users' group to the local 'Power Users' group
though, which is almost as bad, but some of our apps just won't work
right without Power User privs... :(
--
Best regards,
Charles
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
