summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJohn Terpstra <jht@samba.org>2005-12-22 19:40:24 +0000
committerGerald W. Carter <jerry@samba.org>2008-04-23 08:47:14 -0500
commit390c3996da3366367a6354698dca204de74a3869 (patch)
treea8226eabd170ded479248594f2dcfac0f5a22507
parentcb0a5de540433d779cf169dda8ffbd50f05fe396 (diff)
downloadsamba-390c3996da3366367a6354698dca204de74a3869.tar.gz
samba-390c3996da3366367a6354698dca204de74a3869.tar.bz2
samba-390c3996da3366367a6354698dca204de74a3869.zip
Added clarification regarding user rights and privileges.
(This used to be commit 1ec6e88e157cb8e07c22553b0d94d3f19e8766ab)
-rw-r--r--docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml5
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml b/docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml
index 828e3104bd..5ce64ddffd 100644
--- a/docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml
+++ b/docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml
@@ -250,7 +250,10 @@ The <command>net rpc rights</command> utility in Samba 3.0.11 has three new subc
<indexterm><primary>Domain Admins</primary></indexterm>
<indexterm><primary>revoke privileges</primary></indexterm>
You must be connected as a member of the Domain Admins group to be able to grant or revoke privileges assigned
-to an account. This capability is inherent to the Domain Admins group and is not configurable.
+to an account. This capability is inherent to the Domain Admins group and is not configurable. There are no
+default rights and privileges, except the ability for a member of the Domain Admins group to assign them.
+This means that all administrative rights and privileges (other than the ability to assign them) must be
+explicitly assigned, even for the Domain Admins group.
</para></note>
<para>