copy group?

[Richard]

For very specifc reason I need a local group that has full
admin privs with the exception of updating the system
clock. I know how to revoke the clock privs for a specifc
group but of course I don't want to do that for the admin
group. The easiest way I can think of is to copy a group
and revoke that single priv in the new group. Can, and
how, a local group be copied?

 

[Andrej Budja [MVP]]

I don't think you can do that. Once you have admins with full
privileges, but no right to change the clock, they will be able to
assign that right to themselves.

Once you make a person an admin, you cannot revoke him any rights.
They will have enough rights to change that...

Andrej