Re: gpo for local admin restrictions

No, this is not possible.
Administrators cannot be prevented from performing this task.

--
Glenn LeCheminant
CCNA, MCSE 2000/2003 + Security

"Taz" <Taz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F7450241-0122-4934-B94B-2F46701C5991@xxxxxxxxxxxxxxxx
> Hi,
>
> Is there a possibility to prevent local administrators from removing the
> computer account from the domain? I have a large network environment and
> constantly have the issue of my users (who are all local admins on the
> pc's)
> removing themselves from the domain and I want to put a stop to this.
> What I
> want to do is apply a GPO to all users in my domain that restricts them
> from
> doing this (they all must remain as local admins though). I browsed
> around
> in AD but couldn't find any GPO that does this. Maybe someone has an
> idea?
>
> Any help would be appreciated.
>
> Thanks,
> Taz


.

Relevant Pages

  • GPOs and Security
    ... I am trying to figure out how to give my administrators in the field ... 2- Create a GPO ... or groups that were specified in the GPO inside the local admins ... didn't have users who required admin rights to their machines. ...
    (microsoft.public.win2000.security)
  • Re: gpo for local admin restrictions
    ... >> Is there a possibility to prevent local administrators from removing the ... >> removing themselves from the domain and I want to put a stop to this. ... >> doing this (they all must remain as local admins though). ... >> in AD but couldn't find any GPO that does this. ...
    (microsoft.public.windows.server.active_directory)
  • gpo for local admin restrictions
    ... Is there a possibility to prevent local administrators from removing the ... I have a large network environment and ... doing this (they all must remain as local admins though). ... in AD but couldn't find any GPO that does this. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Help needed setting up roaming administrator
    ... >Administrators group (just type in Administrators, don't browse for it, ... >add your Roaming Local Admins group to the Members of this group section ... GPO associated with the OU that contains the computers I want to use ... restricted group and to define the groups the restricted group will ...
    (microsoft.public.win2000.security)
  • Re: Want to add users to their local Admin group
    ... > Above assumes adding user to Administrators group on more than one PC. ... > operation on more than on PC, I think we should use GPO here. ... Restricted groups would be great if we could ... PC-1 with user Joe, PC-2 with user Mary, and PC-3 with user Peter. ...
    (microsoft.public.windows.server.active_directory)
Loading