Re: [Samba] Simple group question...‏

Norberto Bensa
Fri, 10 Jul 2009 05:46:19 -0000

On Fri, Jul 10, 2009 at 2:18 AM, suphakit@gmx.com<suphakit@gmx.com>
wrote:
> Hi,
> This works for me ,you can try.
>
> After join computer to domain ?then log on to Windows Xp with local
> administrator account and go to control panel -> addusers (select
> account from your domain) -> Grant access level to your domain account
> as "Administrator".
>

That's the admin nightmare :-)

If you have 500 computers to admin, how do you remove Tom's admin rights?

The best way is:

- Create a new domain group.
- Add users to new domain group.
- Add this new domain group to the local administrators group on each machine.

Now, every user in "new domain group" will have admin rights in the
computers.

If for some reason you think John Doe does not need admin rights
anymore, you just remove him from the "new domain group"