diff options
Diffstat (limited to 'docs/smbdotconf/logon/enableprivileges.xml')
| -rw-r--r-- | docs/smbdotconf/logon/enableprivileges.xml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/smbdotconf/logon/enableprivileges.xml b/docs/smbdotconf/logon/enableprivileges.xml index aedd4c8f98..3e958e0ce9 100644 --- a/docs/smbdotconf/logon/enableprivileges.xml +++ b/docs/smbdotconf/logon/enableprivileges.xml @@ -6,7 +6,7 @@ <description> <para> This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either - <command>net rpc rights</command> or one of the Windows user and group manager tools. This parameter is + <command>net rpc rights</command> or one of the Windows user and group manager tools. This parameter is enabled by default. It can be disabled to prevent members of the Domain Admins group from being able to assign privileges to users or groups which can then result in certain smbd operations running as root that would normally run under the context of the connected user. |