RE: Disable Network ID and Change button

From: Wozny, Scott (US - New York) (swozny_at_DELOITTE.com)
Date: 12/07/04

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #218" 
    Date: Mon, 6 Dec 2004 18:52:24 -0500
To: "Paul Aviles" <paviles@adjoined.com>, "Danny" <nocmonkey@gmail.com>

    This may sounds overly simplistic, but perhaps a user education effort
    is in order. Sell it to the community by promising them faster and
    easier ways to connect to client printers than what they do now.
    Unfortunately 'Local Admin' = 'Can undo anything you do to their
    machines through group policy' and there's just no way around that. If
    I know consultants, and I think I do, even if you find the registry
    setting you seek they'll just learn how flip it back and do what they've
    always done. Your only effective way to stop this is to make it worth
    their while to do it your way. :)

    Good luck,

    Scott

    -----Original Message-----
    From: Paul Aviles [mailto:paviles@adjoined.com]
    Sent: Thursday, December 02, 2004 4:02 PM
    To: Danny
    Cc: focus-ms@securityfocus.com
    Subject: RE: Disable Network ID and Change button

    I forgot to mention this. We are a consulting company and all people
    need local admin rights...
    Still, they think that to print on a client site they need to install
    Client 32 for Netware and make the computers a member of a client's AD
    domain... All printers nowdays are IP based but that is another story...

    So long story short, I just need to find out how to disable the options
    even with local admin rights. I am sure there must be a registry setting
    somewhere....

    -----Original Message-----
    From: Danny [mailto:nocmonkey@gmail.com]
    Sent: Thursday, December 02, 2004 3:56 PM
    To: Paul Aviles
    Cc: focus-ms@securityfocus.com
    Subject: Re: Disable Network ID and Change button

    On Thu, 2 Dec 2004 15:19:19 -0500, Paul Aviles <paviles@adjoined.com>
    wrote:
    > Is there a way via GPO to disable the Network ID and Change buttons
    > from the Computer Name tab to be disabled so that my users don't have
    > the ability to remove a computer from our domain?

    Umm... if you are a regular domain user, you cannot remove the computer
    from the domain by default. What type of group membership have you
    provided your users?

    ...D

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law.  If you are not the intended recipient, you should delete this message.  Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #218"