Re: What groups does a desktop power-user need to belong to?

> Not _all_ users -- only the ones who have the root password.  Which you simply
> don't give to ordinary users.

Which bypasses the purpose of groups and relies solely on passwords
for security, which are crackable.

> Even on a system which supports it, what
> is there to stop a user who has the root password and physical access but
> isn't a member of the group "wheel", from logging in directly as root from
> the console?

The threat of losing their job/being kicked out of school.