Sa gorenavedenog linka:
"Domain users who are also members of the Administrators local group on their computers have the ability to remove their computers from the domain if they so choose. This would be bad of course, because it would mean that their machines would enter an unmanaged state (unaffected by Group Policy) and this would reduce their security and the security of user data stored on them.
How can you prevent users from unjoining their computers from the domain? Unfortunately, you can’t prevent by modifying user rights, you can only do it by removing their domain user account from the Administrators local group on their computers, which is yet another good reason for not granting users admin privileges over their machines. If your users already have admin privileges on their machines however, you could customize this script from the TechNet Script Repository and deploy it using Group Policy to remove users from the Administrators local group on their machines, but you should carefully test before you take this step as it can cause compatibility issues for some user applications if users are not admins on their machines. "
A šta ako se neko uloguje kao Lokalni Admin, umesto kao user koji ima ovlašćenja Lokalnog Admina*?
edit: *Odnosno u tom momentu ne bi imao ovlašćenja Lokalnog Admina, jer bi bio izbačen iz grupe Local Administrators.
[Ovu poruku je menjao AleksandarNS dana 12.11.2007. u 19:29 GMT+1]
It's a big mistake to allow computer to realise that you are in a hurry.
Kako onemoguciti uklanjanje radne stanice iz Domena?
Re: Kako onemoguciti uklanjanje radne stanice iz Domena?
. 