restricting disjoining domain

[jay]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

All our users are local admins on their own computers, All are either
W2KSP4 or XPPro SP1 or 2 on a native mode W2K domain. Looking throught the
GPMC I didn't see an entry to prevent users from disjoining their computer
from the domain and switching to workgroup mode. Ideally I would like to
restrict this activity to only domain admins. Is it possible to
accomplish this with a GPO or is there perhaps another way?

Thanbks,

Jay

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I might be wrong, but I thought you required domain admin permissions
to remove a computer from the domain. You got me curious, will check it
out tomorrow at work !

Bye
Bar

 

[jay]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Nope, easy as pie to disjoin as long as you're a local admin. Too easy.

<barabba72@hotmail.com> wrote in message
news:1109284747.744762.6760@f14g2000cwb.googlegroups.com...
>I might be wrong, but I thought you required domain admin permissions
> to remove a computer from the domain. You got me curious, will check it
> out tomorrow at work !
>
> Bye
> Bar
>