Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Denying Administrator The Right To Change Computer Name

Posted on 2007-11-23
6
Medium Priority
?
499 Views
Last Modified: 2012-05-05
I want to deny a local administrator the right to be able to shut down a server and change it's computer name or remove it from the domain.

I have created a local group called Shutdown Users and edited the local security policy setting "Shut down the system" and this works a trat.

However i cannot find a setting to be able to do similar to stop them changing the computer name.

How can i acomplish this?
0
Comment
Question by:Avatar261
  • 3
  • 2
6 Comments
 
LVL 1

Expert Comment

by:StevenTodd00
ID: 20339380
Can't be done. A domain admin rights can't be completely dumbed down.

Solution would be to NOT give out the admin password and only give out a secondary login that has delegated rights.

If someone else has the admin password that it not authorized then you have bigger issues.
solve that first then lock everything down.
0
 
LVL 2

Author Comment

by:Avatar261
ID: 20339402
This is not a domain admin.

I am talking about just a local admin on a server.
0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 20342206
Is this a domain server or a Stand alone server?

There is an alternative. It is a GPO to deny "log on locally". Are you interested?
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
LVL 2

Author Comment

by:Avatar261
ID: 20357008
Hmm, it is a domain server.

How does the deny log on locally stop them renaming the computer?
0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 20358675
Just like you create a domain policy or group policy, you can create a local policy. It all depends on what you want to do.

Go to the local policy MMC snapin and add a user policy to that user. I don't know if there is a policy to prevent from changing computer name or prevent from logoff. That's something that someone more familiar with GPOs can tell you.
0
 
LVL 2

Accepted Solution

by:
Avatar261 earned 0 total points
ID: 20795889
i got round this using regedit to remove the properties button from my computer. Crude but affective.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question