Preventing Removal from Domain

[Rob]

I am running 2500 + laptops using WinXP in an AD
structure. These users need to be administrators on the
the laptops. Problem is they keep removing themselves
from the domain. I need to prevent this while still
allowing them access to system properties. I cannot find
a solution using local or group policies.

Any solutions to this issue?

 

[Star Fleet Admiral Q]

Yes - do what we've done - told them if they mess with anything dealing with
the domain setup and they inadvertently remove their Laptop from the domain,
then they're fired - violation of company policy. The same holds true with
many other things in company policies - theft and/or stealing, embezzlement,
using company equipment for personal use, sexual harassment, etc - everyone
has the capability to do it, you just don't do it.

 

[Guest]

OR

Restrict their access to the Network Identification tab.

Hive: HKEY_CURRENT_USER
Key: Software\Microsoft\CurrentVersion\Policies\Network
Name: NoNetSetupIDPage
Type: REG_DWORD
Value: 1

I can't think of any other way that the average user could then remove the
PC from the domain.

Good luck.

Joe