Forbid Change domain

[fafa]

Hi,


Domain AD 2K, workstations in W2K pro or xp. for historical reasons, users
are administrator of their own machine.

I'am looking for a way to :

- forbid the Change domain locally by the users
- forbid the lusers to change the local password administrator

Do smbdy have an idea, i checked in the policy unsuccessfully

Thks
Fafa

 

[pDoGG]

Use Group Policy...you already have an Active Directory
domain.

 

[Steven L Umbach]

Ultimately it is next to impossible to restrict an administrator. I thought I read at
one time there was a registry mod for your first concern, but can't find that
information now. As far as disabling changing local administrator password, you could
try disabling the local users/groups mmc snapin which may dissuade the idle curious
but not the determined user who knows how to use net commands, etc. --- Steve