On Feb 29, 2012, at 7:08 AM, Nikos Roussos wrote:

Why not add by default the first user created (right after installation finishes) to administrative group and disable the root account? 


This is, is fact, how Apple has done things circa 1999 with Mac OS X. You can 'su' to root, you can also 'sudo' but you can't literally login as root either in text console or GUI, the account is disabled. And the first user is an 'admin' by default.

Chris Murphy