added warning to admin people about [nelogon] share must be read-only,

so people don't create their own batch files to stuff other users.

lkcl
(This used to be commit 9685519aa279bfcd24e089871f6e68a6c664e0c1)

diff --git a/docs/textdocs/DOMAIN.txt b/docs/textdocs/DOMAIN.txt
index 4899bafb36d64f6776dbe5c3a702665bf5e86ee3..39b34c61726017ea7b51d333fe136a2830f49c73 100644 (file)
--- a/docs/textdocs/DOMAIN.txt
+++ b/docs/textdocs/DOMAIN.txt
@@ -33,6 +33,10 @@ For example I have used:
     writeable = no
     guest ok = yes
 
+Note that it is important that this share is not writeable by ordinary
+users, in a secure environment: ordinary users should not be allowed
+to modify or add files that another user's computer would then download
+when they log in.
 
 3) in the [global] section of smb.conf set the following: