Preventing Removal from Domain

  • Thread starter Thread starter Rob
  • Start date Start date
R

Rob

I am running 2500 + laptops using WinXP in an AD
structure. These users need to be administrators on the
the laptops. Problem is they keep removing themselves
from the domain. I need to prevent this while still
allowing them access to system properties. I cannot find
a solution using local or group policies.

Any solutions to this issue?
 
Yes - do what we've done - told them if they mess with anything dealing with
the domain setup and they inadvertently remove their Laptop from the domain,
then they're fired - violation of company policy. The same holds true with
many other things in company policies - theft and/or stealing, embezzlement,
using company equipment for personal use, sexual harassment, etc - everyone
has the capability to do it, you just don't do it.
 
OR

Restrict their access to the Network Identification tab.

Hive: HKEY_CURRENT_USER
Key: Software\Microsoft\CurrentVersion\Policies\Network
Name: NoNetSetupIDPage
Type: REG_DWORD
Value: 1

I can't think of any other way that the average user could then remove the
PC from the domain.

Good luck.

Joe
 
Back
Top