samba - Apr 2021 - Running GPMC with a user who is a member of Domain Admins

Hi Louis,
On 06 April 2021 15:45 L.P.H. van Belle wrote:
> so, im asuming this was en "user" with elevated rights that
runned GPMC
> and created the policies, or a user which was added to "domain
admins" which is a big NO NO..
Can you elaborate why you say running GPMC by a user who is a member of Domain
Admins is a "big NO NO" please?

Thanks,
Roy

Because a "user" is not an "administrator" 
You should not "work" with Adminsitrator rights, thats more what i
mean.

Keep this separated. 

I work on my network as user XXXXX.. 
if i must do Administrative tasks, i login as Administrator. 

also, if you working while your administrator, it's really easy to get
"garbage" on you pc, which now can install it self also, because it
already has administrator rights.

Thats what i mean, i hope thats clear. 
its only a safety thing, has nothing todo with samba in general. 
> -----Oorspronkelijk bericht-----
> Van: Roy Eastwood [mailto:spindles7 at gmail.com]
> Verzonden: dinsdag 6 april 2021 17:48
> Aan: 'L.P.H. van Belle'; samba at lists.samba.org
> Onderwerp: Running GPMC with a user who is a member of Domain Admins
> 
> Hi Louis,
> On 06 April 2021 15:45 L.P.H. van Belle wrote:
> > so, im asuming this was en "user" with elevated rights that
runned GPMC
> > and created the policies, or a user which was added to "domain
admins"
> which is a big NO NO..
> 
> Can you elaborate why you say running GPMC by a user who is a member of
> Domain Admins is a "big NO NO" please?
> 
> Thanks,
> Roy

Greetz, 

Louis