isguyatlanta
MIS
I need to stop people from removing thier machines from the domain. The gottcha is that everyone must remain a local administrator.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Rhinorhino on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Domain change prevention
- Thread starter isguyatlanta
- Start date
- Status
If they are Administrators on the local machine then they are always going to be able to do that.
We have users as local Administrators right now and we just add the "DomainName\UserName" to the Admin Group without any local account so that the Domain Profile is the only one they have.
Of course if they ever removed there comp from the Domain here the Security Team would Freak!
We have users as local Administrators right now and we just add the "DomainName\UserName" to the Admin Group without any local account so that the Domain Profile is the only one they have.
Of course if they ever removed there comp from the Domain here the Security Team would Freak!
- Thread starter
- #3
- Status
