Web lists-archives.com

Re: [Samba] power users group




that was exactly what I need to know

as you said using a GPO I can insert MyPowerUsers samba group into the local Power Users group to allow recognize users in MyPowerUsers as local power users for the purpose of authorize software install, etc.

my mistake was to think at the builtin groups ( Table 12.1 - https://www.samba.org/samba/docs/old/Samba3-HOWTO/groupmapping.html ) as domain intrinsict groups while it means local groups.


thank you

On 15/03/2018 16:42, Denis Cardon wrote:
Hi Lorenzo,

I just installed a samba4 dc and I see that Power Users group is missing,
is possible to create that group so that a workstation joined in the
domain can install software using users belonging to that group and how
it can be done?

actually simply creating a group with that name doesn't get any
privilege to that group users.

PowerUsers group is a Windows local group. Even if you had such a group on AD, like the existing "Remote Desktop Users" group, it would not provide what you want.

You can create an "MyPowerUsers" AD group and add your "power users" in that AD group, and then add that "MyPowerUsers" AD group to the Windows local "Power Users" group. That can be done easily through GPO (or any other configuration management solution).

However I would rather advise you to use a software deployment solution to solve your installation needs, like SCCM, Ivanti, WAPT, etc. And I personally would advise you to give a try to WAPT Community 1.5, it was just release this week, and it rocks (I am a little bit biased as I work on that project too :-)

Cheers,

Denis




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba