restricting xp's security tab with samba acl
Hello,
We're porting all our windows file servers over to linux. I just joined our samba server to Active Directory and it works great with ACL (i can add/remove Sales, Marketing, IT groups etc..)
Q) How can I restrict our regular windows XP users from manipulating the "Properties -> Security" tab in file explorer? I'd like to restrict that to only the "Domain Admins" group like in Windows. Right now, anyone can add/remove groups - that's bad.
setting "nt acl support = no" removes ACL control completely, not just for regular users, but admins too.
any ideas?
thanks,
disorderly
|