本地组是由域和/或本用户构成的组,它向这些用户授予附加特权。
SMB 本地组:
管理员-管理员可以绕过文件权限来更改文件的所有权。
备份操作员-备份操作员可以绕过文件访问控制来备份和恢复文件。
hostname:configuration services smb> groups
hostname:configuration services smb groups> create
hostname:configuration services smb member (uncommitted)> set user=Bill
hostname:configuration services smb member (uncommitted)> set group="Backup Operators" hostname:configuration services smb member (uncommitted)> commit
hostname:configuration services smb groups> list MEMBER USER GROUP member-000 WINDOMAIN\Bill Backup Operators