On 7/18/2017, 12:43:29 PM, Tom Davies <[email protected]> wrote: > Hi :) > Brilliant! > > I thought the whole thing about domains was a red herring but Malcolm needs > to be a local admin on that specific machine. It sounds sensible to avoid > letting a "domain admin" also be an admin on any local machine for security > reasons.
Actually, this is wrong. When you join a machine to a domain, the 'Domain Admins' group is automatically added to the Local Administrators group on the computer that was joined. It has been this way forever (as long as I can remember), and is extremely useful, and is simply not a 'security issue' as you suggest. -- To unsubscribe e-mail to: [email protected] Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/users/ All messages sent to this list will be publicly archived and cannot be deleted
