RE: Domain client machine disable admin access

["Murda Mcloud" <murdamcloud () bigpond com>]

I'd be interested to know what it is you don't want them to see. On second
thought, don't tell me-I could get into trouble.

Seriously though, if it is a privacy issue on your part, then I believe the
law(if you are in the UK) may be partly on your side and partly on your
company's side. If they own the machine(which I imagine is the case) then
they are allowed to scan your machine for whatever they like but need to be
careful that it is not arbitrarily done. Ie they want to read emails that
you're sending to your doctor or psych. Not that I'm suggesting you have
one.
Talking of privacy and anonymity, if your real name is Kelly Jones and some
of your admins belong to this list...

> > -----Original Message-----
> > From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> > On Behalf Of Kelly Jones
> > Sent: Wednesday, May 21, 2008 11:55 PM
> > To: security-basics () securityfocus com
> > Subject: Fwd: Domain client machine disable admin access
> >
> > Is there a way to stop the domain admin from connecting to a client
> > machine?
> >
> > I am a member of a domain and it has come to my attention that
> > management has been scanning for installed software among other
> > things, i have the XP firewall enabled and have removed the domain
> > admins group from the local admins group.  Is there anything else i
> > need to do to deny domain admin access to my machine?