Sign in with
Sign up | Sign in
Your question

restricting disjoining domain

Last response: in Windows 2000/NT
Share
February 23, 2005 6:53:56 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

All our users are local admins on their own computers, All are either
W2KSP4 or XPPro SP1 or 2 on a native mode W2K domain. Looking throught the
GPMC I didn't see an entry to prevent users from disjoining their computer
from the domain and switching to workgroup mode. Ideally I would like to
restrict this activity to only domain admins. Is it possible to
accomplish this with a GPO or is there perhaps another way?

Thanbks,

Jay
Anonymous
February 24, 2005 5:39:07 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I might be wrong, but I thought you required domain admin permissions
to remove a computer from the domain. You got me curious, will check it
out tomorrow at work !

Bye
Bar
February 25, 2005 7:18:43 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Nope, easy as pie to disjoin as long as you're a local admin. Too easy.

<barabba72@hotmail.com> wrote in message
news:1109284747.744762.6760@f14g2000cwb.googlegroups.com...
>I might be wrong, but I thought you required domain admin permissions
> to remove a computer from the domain. You got me curious, will check it
> out tomorrow at work !
>
> Bye
> Bar
>
!