Re: Should a user be able to unjoin from domain?

sysadmin guy wrote:
I have a user, who does have local admin and has managed to unjoin his laptop from the domain and put into his own workgroup. Should he have been able to unjoin from the domain without knowing a user name and password for someone with domain admin security group membership?


If he has administrative privileges to the workstation, certainly. If you don't want him doing such things, why does he have administrative privileges?


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrum Russell
.

Relevant Pages

  • Re: XP Home permission rights
    ... I am running XP Home SP2. ... So long as the other user have administrative privileges, he/she can access *anythng* on the hard drive. ... They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: "Living" in admin account all day?
    ... While using a computer with limited privileges isn't the cure-all, silver bullet that some claim it to be, any experienced IT professional will verify that doing so definitely reduces that amount of damage and depth of penetration by the malware. ... A technically competent user who is aware of the risks and knows how to take proper precautions can usually safely operate with administrative privileges; ... They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ...
    (microsoft.public.windowsxp.general)
  • Re: ADMINISTRATOR ACCOUNT
    ... The same way you'd set or change a password for any other account. ... Simply log in using an account with administrative privileges: ... They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admin accounts
    ... else with Admin rights uses the same pc, how do I keep them from being able to view my files? ... Remove that person's administrative privileges. ... They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: DOS and win xp
    ... Actually, it's a valid question. ... We've no way of knowing whether or not a random, unnamed application will work, or not. ... They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ...
    (microsoft.public.windowsxp.general)