Re: Rename Workstation Accounts

From: Dale (Dale_at_discussions.microsoft.com)
Date: 09/21/04


Date: Mon, 20 Sep 2004 22:09:03 -0700

If users logon to the domain, and they are local admins of the machines, you
can apply
a GPO to an OU that they belong to. For instance I disable a control panel
for my users, and even though they are local admins they can`t access control
panel or my computer properties to rename a machine.

D

"Colin Nash [MVP]" wrote:

>
> "Jockel" <Jockel@discussions.microsoft.com> wrote in message
> news:37FD9F92-E53E-49CC-A577-5AC6FAE9096A@microsoft.com...
> >I need to prevent users from renaming the XP SP1 workstations. This is
> >only
> > a problem when dealing with users that are in the Local Administrator
> > accounts for other purposes. It is becoming a problem that machines
> > deployed
> > with the standard naming convention are being changed.
> >
> > Environment is XP SP1 workstations migrating from NT4 Resource domains to
> > AD
> > OU's. The units in the AD OU must meet the correct naming convention and
> > the
> > names should not be changed after the move.
> >
> > I cannot take away administrator rights for this group of users. Is there
> > a
> > User right locally or in AD that I am not seeing that would allow me to
> > control this?
>
> If they are admins of the machines, they can rename them.
>
> However, you should be able to make it so that if they do this, they will be
> cutting themselves off the domain.
>
> This may be related...
> http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/526.asp
>
>
>
>
>
>



Relevant Pages

  • Re: Installing Software without being Local Admin?
    ... Some of you may remember back in June I posted a topic entitled 'Network Computer Games on Business Machines' which detailed the problem we were having with some of our users installing software & games on their machines, as they were local admins. ... So I need to find someway of allowing users to install fix packs/re-install the software, without giving them full local admin access. ...
    (microsoft.public.security)
  • Re: Global Account for Installing Software
    ... You could create a sub-ou within the main ou for these machines and use ... restricted groups to delegate a subadmin to manage these machines. ... If you want them to be local admins so they can perform maintenance than you ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy and Local Administrator
    ... > users on their local machines. ... > maintain these users as local admins on their machines only, ... > making them power users on other computers on the network. ...
    (microsoft.public.win2000.active_directory)
  • Add additional domain group to local admins groups?
    ... groups other than just "domain administrators" to the local administrators ... on all domain workstation? ... We would like to have a group with members that are local admins on all ... workstations and also have the right to add and remove machines names to the ...
    (microsoft.public.windows.group_policy)
  • Re: DRO suggestions (computer input like via USB)
    ... scales and outputs one stream of signals to the parallel port? ... Quadrature outputs occupy two bits. ... encoders and will also permit some forms of machine control. ... controlling machines that require precision motion control. ...
    (rec.crafts.metalworking)