Thread-topic: Some users login and get local admin rights
The problem is I don't have control over the network user accounts. The
account I first set up locally is an admin account.
None of the users are segregated by mac vs windows at the domain level.
They are all standard users when they authenticate to AD via logging
onto Mac computers. I was wondering if a script could make this happen?
-----Original Message-----
From: client-management-bounces+ddougla2=email@hidden
[mailto:client-management-bounces+ddougla2=email@hidden]
On Behalf Of Ed Pastore
Sent: Monday, April 25, 2005 1:25 PM
To: email@hidden
Subject: Re: Some users login and get local admin rights
> It's not a problem to have each user authenticate, but I can't figure
> out how to give them local admin rights. They can't be network
admins,
> but it's ok for them to be local admins. Anyone else tried this? I
> created a user account with local admin rights, then copied it to the
> default user template. Everyone who logs in after that gets the
> appropriate applications, dock, etc, but not local admin rights.
When you first set them up, are they an Admin or regular?
I see a lot of flakiness in this regard. I had set up my local account
as an
Admin account. And no matter what I do (turning off Admin, making me
mobile,
making me Managed), I still have full admin rights on this machine... I
am
listed as managed/mobile, but when I go to install software, my
user/pass
works just fine.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Client-management mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/client-management/ddougla2%40rich
mond.edu
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Client-management mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/client-management/email@hidden
This email sent to email@hidden