Hello Guys. I used to have a win2k server PDC before I moved everything to samba. On win2k server you could have certain users on the admin griup and whenever those users would log in on of the workstations, they would have local amin rights on the machine and could do anything... of course,the other users that where not in the group would not have rights to do anything like installing programs on the workstations and such. Is this true for samba also? or are all samba users by default admins on their workstations and can install programs and such? did I lose that control about users? How can I restrict users from doing those thing on their ws and allow certain others to be local admins using samba? Saludos Anton Krall Director de Tecnolog?a Inter.net M?xico / Panam? Tel; 5241-7609 Directo Tel: 5241-7600 Conmutador Celular: 0445-105-5160 Mobile ICQ: 4979450 email: akrall@team.inter.net web: http://www.mx.inter.net <http://www.mx.inter.net/> Outside Mexico: Office: +52(555)241-7609 PBX: +52(555)241-7600 Mobile: +52(555)105-5160 -------------- next part -------------- HTML attachment scrubbed and removed
Anton Krall wrote:> Hello Guys. > > > > I used to have a win2k server PDC before I moved everything to samba. > > > > On win2k server you could have certain users on the admin griup and > whenever those users would log in on of the workstations, they would > have local amin rights on the machine and could do anything... of > course,the other users that where not in the group would not have > rights to do anything like installing programs on the workstations and > such. > > > > Is this true for samba also? >Yes, look at the "domain admin group" feature in smb.conf> or are all samba users by default admins on their workstations and can > install programs and such? >No.> did I lose that control about users? >No. -Bill Moran
I thought the domain admin group was deprecated on the new version of samba.. Im using 2.2.. Is it still available there? Saludos Anton Krall Director de Tecnolog?a Inter.net M?xico / Panam? Tel; 5241-7609 Directo Tel: 5241-7600 Conmutador Celular: 0445-105-5160 Mobile ICQ: 4979450 email: akrall@team.inter.net web: http://www.mx.inter.net Outside Mexico: Office: +52(555)241-7609 PBX: +52(555)241-7600 Mobile: +52(555)105-5160 -----Original Message----- From: samba-admin@lists.samba.org [mailto:samba-admin@lists.samba.org] On Behalf Of Bill Moran Sent: Mi?rcoles, 13 de Marzo de 2002 09:16 a.m. To: akrall@team.mx.inter.net Cc: samba@lists.samba.org Subject: Re: [Samba] Samba PDC and local admins Anton Krall wrote:> Hello Guys. > > > > I used to have a win2k server PDC before I moved everything to samba. > > > > On win2k server you could have certain users on the admin griup and > whenever those users would log in on of the workstations, they would > have local amin rights on the machine and could do anything... of > course,the other users that where not in the group would not have > rights to do anything like installing programs on the workstations and> such. > > > > Is this true for samba also? >Yes, look at the "domain admin group" feature in smb.conf> or are all samba users by default admins on their workstations and can > install programs and such? >No.> did I lose that control about users? >No. -Bill Moran -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba