On Thu, Jan 13, 2005 at 04:51:22PM -0700, Robert LeBlanc wrote: > > (which for us is run at the end of every install): > > > > net localgroup "Debugger Users" everyone /add > > > I would refrain from everyone and add the user's domain group like > domain\programmers which closes some security issues. Also this must be > done in a Computer Start-up script as the user will not have the access > to add themselves to the group so the computer has to be restarted. >
Ah yes, the real solution. Unfortunatly this requires Samba 3 and using a backend that is not the old ldap passwd backend (ldapsam-compat). You cannot add users to domain groups (besides the default 'Domain Users' group) or add domain groups to a local group. My question is why a startup script? Your explanation is unclear. As I don't use domain groups at work, won't a group mapping even if it is domain -> local remain between reboots? Also, as for security problems, what if all your users need to have this functionality? Then there are no security issues that aren't going to be present anyways. This is the situation I am in, and it is the only solution I could find after a week of searching. -- Scott Paul Robertson http://spr.mahonri5.net GnuPG FingerPrint: 09ab 64b5 edc0 903e 93ce edb9 3bcc f8fb dc5d 7601
pgpRfIlEn9GmE.pgp
Description: PGP signature
-------------------- BYU Unix Users Group http://uug.byu.edu/ The opinions expressed in this message are the responsibility of their author. They are not endorsed by BYU, the BYU CS Department or BYU-UUG. ___________________________________________________________________ List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list
