Forbid Change domain

  • Thread starter Thread starter fafa
  • Start date Start date
F

fafa

Hi,


Domain AD 2K, workstations in W2K pro or xp. for historical reasons, users
are administrator of their own machine.

I'am looking for a way to :

- forbid the Change domain locally by the users
- forbid the lusers to change the local password administrator

Do smbdy have an idea, i checked in the policy unsuccessfully

Thks
Fafa
 
Ultimately it is next to impossible to restrict an administrator. I thought I read at
one time there was a registry mod for your first concern, but can't find that
information now. As far as disabling changing local administrator password, you could
try disabling the local users/groups mmc snapin which may dissuade the idle curious
but not the determined user who knows how to use net commands, etc. --- Steve
 
Back
Top