How to stop users from changing their computers from domain to workgroup

By Jacques.Gordon ·
I am having a problem with some users that are using tools like winternals etc to gain access to their local admin user account on windows xp and then using that to take their machine off of the domain.

How can I stop them from being able to do that?

Will they be able to do that with windows seven machines?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

There will always be that issue

by markp24 In reply to How to stop users from ch ...


One option is to have a company policy, that each users signs when they receive their equipment, stating there should be no modifications to this systems settings,(ie network settings). Also any unauthorized modifications, administrative access , etc will be a violation of this policy and may result in employee termination. (have that pop up every time the use logs in)

see these policies as a base line

Collapse -

yeah, we're working on that.

by Jacques.Gordon In reply to There will always be that ...

Thanks, we're working on a policy at the moment! I was hoping for something to stop the average tech literate person that knows how to boot off of a winternals cd or such. I tried disabling the admin account but I'm gonna have to test it and see if it makes any difference.
I tried with win7 and it's a lot harder to hack the admin account on there.

Collapse -

you could change the bios settings

by markp24 In reply to yeah, we're working on th ...

if you want you could change the bios seetting to boot from the hard drive first, then put a password on the bios.
if the bios allos it set all other boot options to none (vs floppy, cd, etc)

also turn off the boot device menu prompt (if there is one) (set the timeout to 0)

that will stop that issue of booting off external devices.

i hope that helps.

Collapse -


by oldbaritone In reply to How to stop users from ch ...

(Time Off WithOut Pay)

Get backing from management.

Then 'splain to the users that this is a Company machine, and hacking it will result in a little "reflection time" why they shouldn't do that - without pay.

Of course, if it's the manager who's doing it, that's a touchy one...


Collapse -

I wish

by markp24 In reply to TOWOP!

This type is issue, including when users install things they want, even though it wreaks havoc on the systems, is such a pain.
I had a CEO who let his kids use his work laptop, would come to work, complain it was slow, and i had to deal with it. Each time we would wipe and give a clean load, he would be happy and love the machine, after the weekend he would come in and complain of pop ups, errors, etc, all caused by his middleschool son was playing on it. How do you stop exec's from that stuff... tough one.

Collapse -


by oldbaritone In reply to I wish

I had one like that, but he let the kids play on the SERVER because he didn't want them on HIS machine.


Finally, I explained to him, "Do you understand that they're really playing 'YOU BET THE BUSINESS' on those kids games? When the server goes down, EVERY employee will stop working until it's fixed. Is it really worth that?"

The next week, there was a second computer next to his office.

It's nice when people listen.

Collapse -

Thats is tooo funny

by markp24 In reply to Similar

Got to wonder what people are thinking when they do that.

Related Discussions

Related Forums