Re: gpo to prevent rename computer and domain join


Darren Mar-Elia wrote:
If they are administrators, then no, there is nothing you can really do. You
should really try to find a way to remove their administrative access
because once a user is administrator on their box, all bets are off. Even if
there were a GP setting that could do this, as administrator they could foil
GP quite easily.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Get the NEW GPHealth Reporter tool at
http://www.sdmsoftware.com/products.php


"Greg" <oupssss> wrote in message
news:eZgn5WPJHHA.3668@xxxxxxxxxxxxxxxxxxxxxxx
Hi, I have to prevent my users that are local administrators to rename
their computer and disjoin the computer from the domain.

Is that possible ?

haven't found anything on google or microsoft....

Thanks in advance, hel wd be greatly apprecited


I believe you can change the permissions to a registry key to deny
users change access to it.

Michael P. Perrault
MCSE, CCNA, A+, MBA
Senior Systems Engineer,
ScriptLogic Corporation

Michael.Perrault@xxxxxxxxxxxxxxx
www.scriptlogic.com
http://groups-beta.google.com/group/scriptlogic-desktop-authority

.

Relevant Pages

  • Re: Password
    ... "If a user password is lost, forgotten, or unknown, the only method to reset ... the password is for the administrator (or a user with administrative access) ... "If the administrator password is lost, forgotten, or unknown, access to the ...
    (microsoft.public.win2000.general)
  • Re: Access is denied. , error from ipconfig, ping, netsh, etc.
    ... Thanks JS, Yes, I have tried it logged in as Administrator, same result. ... I DO HAVE FULL ADMINISTRATIVE ACCESS. ... Every time I try to run any network command I know from the command shell I get "Access is denied.", be it ipconfig, netsh, ping, etc. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Domains and unrestricted access
    ... will have many good reasons for denying you administrative access. ... I know the admnistrator password. ... and administrator in domain 2. ... in control>panel>users and passwords i can't find my account. ...
    (microsoft.public.win2000.general)
  • Re: Error 18456 Login failed for user distributor_admin
    ... group 'distributor_admin' actually has the administrative access it ... If you don't work with the file permissions ... If you are on a network and the network administrator ...
    (microsoft.public.sqlserver.replication)