Restrict/Block computer name tab is System Properties

[smoore0414]

I know that if you are not a 'local admin' of the PC, changing anything in
the Copmuter Name tab is blocked. But i need a way to do this for accts that
are even local admins. Only thing i have found so far is to remove the
Systems Properties from the user (even if the user is a local admin) using a
registry key. I don't want to remove System Properties completely as the user
may need to make changes in there, but i want to prevent them from changing
the computer name and changing the domain membership.

Any ideas if this is possible?

 

[Poprivet`]

I know that if you are not a 'local admin' of the PC,
changing
anything in the Copmuter Name tab is blocked. But i
need a way to do
this for accts that are even local admins. Only thing
i have found so
far is to remove the Systems Properties from the user
(even if the
user is a local admin) using a registry key. I don't
want to remove
System Properties completely as the user may need to
make changes in
there, but i want to prevent them from changing the
computer name and
changing the domain membership.

Any ideas if this is possible?

Yeah; restrict the privileges of anyone who does so.
And tell them why and when they can have them back.

 

[smoore0414]

The only way to restrict the priveledegs is either: a) make then standard
users on the pc, which is not an option; or b) remove the system props from
the current user using the reg key.

Unless there is another way, neither of these are good options.