Ok people,

So here is the situation. I have a Samba 3.0 server which works great with a cluster of Windows XP and 2000 Professional clients.

My users can log into any machine on the network and gain access to their mapped drives. However unless they are explicitly added to the administrators group on the machine unto which they log into, they cannot do certain things like add a printer or install software.


As it is, I have to go to every machine and add them as an administrator which can get tedious when you have over 60 machines and about 80 users.


Does anyone have experience with this or any sugggestion? Say have the users listed somewhere so that whatever machine the log into, they have admin rights locally?


Any ideas?

Thanks.

I assume that the samba server is also the print server. Have you configured it for plug and play printer drivers? If so, then with my limited windows admin knowledge it could be because your not using a real windows print server.

As far as installing software do you really want to let all users have full rights. This could be a real security issue.

kofi,

This is true of most OS'es...

You have found one solution... just adding each user to the admin group. Which IMO is a very scary one since you have just given every user the equivilant of root on all those machines.

Another solution is to do a littel reading on windows security and create a group that will allow the users access/rights to do the things you want them to do but not allow them to do other things. BTW check out the rights for Power Users... sounds like that is about the rights you want them to have.

As for having to add them to each machine....

If you have a real windows domain that the machines are in then just add the users to the domain level group and that will take care of it for all the machines in the domain when they log in.

Overall I would suggest thinking about what you would do if this were a pure linux environment, then researching what the windows ewquivelant is and doing it.