Privilege Escalation via Samba

[Trevor]

Privilege escalation can be achieve via Samba.  

Does anyone KNOW how to prevent this?  I'm not asking for the mechanics (i.e. the steps) on what to do.  Right now, I simply want to KNOW if the door can shut (100%/absolutely/positively/guaranteed) on privilege escalation via Samba!

Of course, I KNOW one full-proof way to achieve this - eliminate the service altogether!!!

Thanks in advance!