Users remove them selves from the domain

  • Thread starter Thread starter klose
  • Start date Start date
K

klose

I have laptop users that need the ability to change some network devices and
load drivers.

We use group policy to enable this right because they need that level of
control.

The policy does not prevent them from removing the computer from the domain.

How can I block access to the System properties, Computer Name tab, change
button, but still give them some rights to the other network properties?
 
You can use Group Policy to remove system properties from the desktop context menu
for My Computer and hide it from Control Panel, but you can not do it as granular as
you want and hiding will not stop determined users as long as they are local
administrators. --- Steve
 
Other than taking away their local admin rights, I'd say the answer is an
official company policy and training ;-)

Make sure they know not to mess around with their computer's domain
membership. They don't need to, ever. If they want to use their laptops on
their home networks, other networks, etc., there's no need to remove the
computer to the domain in order to access resources elsewhere.
 
Back
Top