Re: I want to Prevent Users from removing workstation from domain
- From: Ludwin Pacheco <LudwinPacheco@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 30 May 2007 07:58:06 -0700
OK all users ares members of local administrators, but for policy from my
company we need to put users account like local administrators is very
necesary. But now how can I do to prevent Users from removing workstation
from domain.
"Jorge Silva" wrote:
Hi.
Just make sure that the users are not members of local administrators, only
trusted users should have that right, and remember you don't need to have
the workstation plugged to your network to remove that machine from the
domain.
--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE, MVP Directory Services
"Ludwin Pacheco" <LudwinPacheco@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:77D29A13-E1CE-41EF-B796-33C335E0C2C3@xxxxxxxxxxxxxxxx
OK we have 100 workstations, but How can I do for deny this permission
Prevent Users from removing workstation from domain to all user and give
permission Add workstations to domain only one group, for example:
built/administrator or any other user account.
Right now I have or configured GPO to Add workstations to domain to only
one
group and one user account, but all users have the permission to removing
workstation from domain, I need to prevent this permission (Users from
removing workstation from domain)
"Al Mulnick" wrote:
You don't know how to remove their administrative privileges at the
workstation?
Start with reading this:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/usercpl_overview.mspx?mfr=true
and this:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/usercpl_overview.mspx?mfr=true
and especially this:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/usercpl_overview.mspx?mfr=true
How many workstations do you have?
"Ludwin Pacheco" <LudwinPacheco@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:B31F69BE-54C6-48FF-B8C1-7366F4821A35@xxxxxxxxxxxxxxxx
How I can do this? because I don't have idea or I don't know?
"Al Mulnick" wrote:
The only way is to remove their ability at the workstation. I.e.
remove
administrative privs on the workstation for the users.
"Ludwin Pacheco" <LudwinPacheco@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:758E5B8F-5A9B-49B3-87BE-CC5C3DE5A619@xxxxxxxxxxxxxxxx
OK, but now I want to Prevent Users from removing workstation from
domain,
because I configured this GPO:
Configure a GPO for it. Under computer configuration>windows
settings>security
settings>local policies>user rights assignment you see at the right
pane
"Add workstations to domain". Add here your user account.
Only with administrators group, but I want to Prevent Users from
removing
workstation from domain, only administrators group have the
permission
to
removing workstation, only this group.
let me know, What I need?
- Follow-Ups:
- Re: I want to Prevent Users from removing workstation from domain
- From: Al Mulnick
- Re: I want to Prevent Users from removing workstation from domain
- References:
- Re: I want to Prevent Users from removing workstation from domain
- From: Al Mulnick
- Re: I want to Prevent Users from removing workstation from domain
- From: Al Mulnick
- Re: I want to Prevent Users from removing workstation from domain
- From: Ludwin Pacheco
- Re: I want to Prevent Users from removing workstation from domain
- From: Jorge Silva
- Re: I want to Prevent Users from removing workstation from domain
- Prev by Date: AD Forest
- Next by Date: Re: Active Directory Application Mode (ADAM) and Reporting Services
- Previous by thread: Re: I want to Prevent Users from removing workstation from domain
- Next by thread: Re: I want to Prevent Users from removing workstation from domain
- Index(es):
Relevant Pages
|
