samba - Aug 2010 - local admin rights for roaming profiles

Hi.

I have a samba server designed to PDC on my network.  The roaming
profiles is enabled and work fine.  But some apps used from the samba
server share, apparently need to the user in the station have admin
privileges.  Im enabling in the station (XP or Win7) the admin
privileges to the station asigned user (DOMAIN\user) but in that case,
the roaming profile is not a complete solution, because is necesary
modify the local permission.

Any user can access on any station, and the user profile is loaded
correctly; but that admin privileges requirements affect the dalily
work, because is for an internal apps.

The another reason is to i dont wanna give local admin privileges to
all the users!  (some users are extremly dangerous with local admin
permissions).

how can i provide that admin privileges only to access the app shared
on \\SAMBASERVER\shared .

Thanks in advance.

regards

...
> The another reason is to i dont wanna give local admin privileges to all
the users!  (some users are extremly dangerous with local admin permissions).
> how can i provide that admin privileges only to access the app shared on
\\SAMBASERVER\shared .
CPAU might do what you want, but it isn't terrific from a security point of
view. I had a similar problem and in the end the simplest solution was to create
a domain group called "Local Admins" and then add that to the local
administrators group on each PC.

--

Michael Heydon
IT Administrator