From: John Terpstra <jht@samba.org>
Date: Thu, 22 Dec 2005 19:40:24 +0000 (+0000)
Subject: Added clarification regarding user rights and privileges.
X-Git-Tag: samba-3.3.0pre1~1818
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1ec6e88e157cb8e07c22553b0d94d3f19e8766ab;p=thirdparty%2Fsamba.git

Added clarification regarding user rights and privileges.
---

diff --git a/docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml b/docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml
index 828e3104bd7..5ce64ddffdf 100644
--- a/docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml
+++ b/docs/Samba3-HOWTO/TOSHARG-RightsAndPriviliges.xml
@@ -250,7 +250,10 @@ The <command>net rpc rights</command> utility in Samba 3.0.11 has three new subc
 <indexterm><primary>Domain Admins</primary></indexterm>
 <indexterm><primary>revoke privileges</primary></indexterm>
 You must be connected as a member of the Domain Admins group to be able to grant or revoke privileges assigned
-to an account.  This capability is inherent to the Domain Admins group and is not configurable.
+to an account.  This capability is inherent to the Domain Admins group and is not configurable. There are no
+default rights and privileges, except the ability for a member of the Domain Admins group to assign them.
+This means that all administrative rights and privileges (other than the ability to assign them) must be 
+explicitly assigned, even for the Domain Admins group.
 </para></note>
 
 <para>