Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 11:50, Michael Leone wrote: > On Thu, Mar 21, 2013 at 11:43 AM, Gregory Sloop wrote: > > > ML> Well, it's a lot more work, but you could use the Windows utilities > > ML> FILEMON and REGMON to monitor what file and registry access your > > ML> applications require on the local

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 8:43, Gregory Sloop wrote: > > > ML> On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin > wrote: > >> On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: > >> > >>> DONT DO IT !! > >>> > >>> This is Administrators 1ste rule !! > >>> NEVER, but then NEVER giver users Administrator/Po

Re: [Samba] Making users local administrators

2013-03-21 Thread Novosielski, Ryan
AM Cc: samba@lists.samba.org Subject: Re: [Samba] Making users local administrators On Thu, Mar 21, 2013 at 11:43 AM, Gregory Sloop wrote: > ML> Well, it's a lot more work, but you could use the Windows utilities > ML> FILEMON and REGMON to monitor what file and registry

Re: [Samba] Making users local administrators

2013-03-21 Thread Michael Leone
On Thu, Mar 21, 2013 at 11:43 AM, Gregory Sloop wrote: > ML> Well, it's a lot more work, but you could use the Windows utilities > ML> FILEMON and REGMON to monitor what file and registry access your > ML> applications require on the local machine, and then grant the local > ML> user access to ju

Re: [Samba] Making users local administrators

2013-03-21 Thread Robert Schetterer
Am 21.03.2013 16:39, schrieb Terry Austin: > There is no good reason to have users logging in daily as Administrator > anymore however its not a good idea, its wide practise that road warrior users are local admins on their laptops, what must not mean ,they are working as such ever, but have the

Re: [Samba] Making users local administrators

2013-03-21 Thread Novosielski, Ryan
ssage - From: Terry Austin [mailto:te...@crownhardware.com] Sent: Thursday, March 21, 2013 11:24 AM To: L.P.H. van Belle Cc: samba@lists.samba.org Subject: Re: [Samba] Making users local administrators On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: > DONT DO IT !! > > This is

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 11:30, Michael Leone wrote: > On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin > wrote: > > On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: > > > >> DONT DO IT !! > >> > >> This is Administrators 1ste rule !! > >> NEVER, but then NEVER giver users Administrator/PowerUser rights.

Re: [Samba] Making users local administrators

2013-03-21 Thread Gregory Sloop
ML> On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin wrote: >> On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: >> >>> DONT DO IT !! >>> >>> This is Administrators 1ste rule !! >>> NEVER, but then NEVER giver users Administrator/PowerUser rights. >> >> I have no choice. There's too much stuff out

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
> Sent: Thursday, March 21, 2013 11:24 AM > To: L.P.H. van Belle > Cc: samba@lists.samba.org > Subject: Re: [Samba] Making users local administrators > > On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: > > > DONT DO IT !! > > > > This is Administrators 1s

Re: [Samba] Making users local administrators

2013-03-21 Thread Michael Leone
On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin wrote: > On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: > >> DONT DO IT !! >> >> This is Administrators 1ste rule !! >> NEVER, but then NEVER giver users Administrator/PowerUser rights. > > I have no choice. There's too much stuff out of my control

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 8:14, Gerry Reno wrote: > On 03/21/2013 05:29 AM, L.P.H. van Belle wrote: > > DONT DO IT !! > > > > This is Administrators 1ste rule !! > > NEVER, but then NEVER giver users Administrator/PowerUser rights. > > > > Do not give the users ability to install software, wrong wrong

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: > DONT DO IT !! > > This is Administrators 1ste rule !! > NEVER, but then NEVER giver users Administrator/PowerUser rights. I have no choice. There's too much stuff out of my control that requires the daily user have admin rights locally. Pl

Re: [Samba] Making users local administrators

2013-03-21 Thread Gerry Reno
On 03/21/2013 05:29 AM, L.P.H. van Belle wrote: > DONT DO IT !! > > This is Administrators 1ste rule !! > NEVER, but then NEVER giver users Administrator/PowerUser rights. > > Do not give the users ability to install software, wrong wrong... > > This is you trojans/Virussus etc come in your co

Re: [Samba] Making users local administrators

2013-03-21 Thread L . P . H . van Belle
org >Onderwerp: Re: [Samba] Making users local administrators > >The linky-thingy did have a way of doing so via a GPO. I've not tried >it, but it certainly looks like it should work. > >>> While I've not done this via GPO - this looks like a >reasonable way of >&

Re: [Samba] Making users local administrators

2013-03-20 Thread Gregory Sloop
The linky-thingy did have a way of doing so via a GPO. I've not tried it, but it certainly looks like it should work. >> While I've not done this via GPO - this looks like a reasonable way of >> doing so. >> >> http://www.expta.com/2011/02/adding-users-to-local-security-groups.html >> Try it.

Re: [Samba] Making users local administrators

2013-03-20 Thread Terry Austin
Yeah, I figured that out. It's not the right way, because it has to be done on each machine in the domain, but so does setting it to log in to the domain in the first place. So it's just a new line in my deployment checklist. Thanks. On 20 Mar 2013 at 15:56, Gregory Sloop wrote: > An easy way

Re: [Samba] Making users local administrators

2013-03-20 Thread Gregory Sloop
An easy way is: For the Administrator group on the local machine, add "domain users" to that *local* group. [This means that any domain authenticated user will have local admin privs.] --- While I've not done this via GPO - this looks like a reasonable way of doing so. http://www.expta.com/2011

[Samba] Making users local administrators

2013-03-20 Thread Terry Austin
I have Samba 4 (lastest version, I think) set up for Active Driectory. Everything is working just, using Microsoft's Group Policy Editor to manage stuff. Except one thing: For reasons you don't want to get me started on, I need all users to have local administrative priviliges on any computer o