Users have full access to non authorized share

[ddr400]

I'm having a serious problem in the Zentyal server.
After an component upgrade, my zentyal gives R/W access to all users to all shares (even the ones that don't have any acl defined).

Any ideas?

Best Regards

[ddr400]

I found that if an user are associated to the user group DOMAIN ADMINS, he could access in R/W to all zentyal server shares...

It's a bug or it is a configuration issue?

[jbahillo]

Hi there:

If that user is a domain admin, he will be able to acces any share, that's right and the intended way to be .

Note that this kind of user should only be used for joining a computer to a domain or similar uses (domain administration)

[ddr400]

Hi there,

If I need an user with installation rights only... what can I do to define that without insert that user in the Domain Admins?

Best Regards

[jbahillo]

Hi there, do you need it for every pc? One possible solution could be inserting the user group (say installers) into the local computer admin group (for local I mean the group in that computer) through a GPO.