what kind of rights to disjoin machine from domain

what kind of local rights doesa user need to disjoin a machine from domain
and put into workgroup?

Does it "have" to be local admin?

 

Hello Joey,

You will need a domain admin or domain account that have delegated rights
to do this..

--
Isaac Oben [MCTIP:EA, MCSE]
"Joey" <joey@joey.com> wrote in message
news:OMkPKUezJHA.4632@TK2MSFTNGP02.phx.gbl...
> what kind of local rights doesa user need to disjoin a machine from domain
> and put into workgroup?
>
> Does it "have" to be local admin?
>

 

Hello joey,

Yes. And if you like to remove the account form the domain, domain admin
rights are needed or delegated control for non-admins.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> what kind of local rights doesa user need to disjoin a machine from
> domain and put into workgroup?
>
> Does it "have" to be local admin?
>

 

Its a windows xp machine on the domain that I want to put into workgroup
mode. Why do I need domain admin rights for that?
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb6622d988cb9c44cea08f2d@msnews.microsoft.com...
> Hello joey,
>
> Yes. And if you like to remove the account form the domain, domain admin
> rights are needed or delegated control for non-admins.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> what kind of local rights doesa user need to disjoin a machine from
>> domain and put into workgroup?
>>
>> Does it "have" to be local admin?
>>
>
>

 

Strictly speaking, you don't. If you have local admin rights on the
workstation, it will put the workstation into a workgroup. But if you have
not used a domain admin account, the XP machine will not have been removed
from the domain. You would need to log on to the domain with a domain admin
account to remove the xp machine from the domain computers.

"Joey" <joey@joey.com> wrote in message
news:OWmc1ZmzJHA.4272@TK2MSFTNGP06.phx.gbl...
> Its a windows xp machine on the domain that I want to put into workgroup
> mode. Why do I need domain admin rights for that?
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb6622d988cb9c44cea08f2d@msnews.microsoft.com...
>> Hello joey,
>>
>> Yes. And if you like to remove the account form the domain, domain admin
>> rights are needed or delegated control for non-admins.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> what kind of local rights doesa user need to disjoin a machine from
>>> domain and put into workgroup?
>>>
>>> Does it "have" to be local admin?
>>>
>>
>>
>
>

 

Hello joey,

For changing to workgroup you must be local admin. To remove it in AD Users
and computers you need delegated control for non-admins or domain admin rights.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Its a windows xp machine on the domain that I want to put into
> workgroup
> mode. Why do I need domain admin rights for that?
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb6622d988cb9c44cea08f2d@msnews.microsoft.com...
>> Hello joey,
>>
>> Yes. And if you like to remove the account form the domain, domain
>> admin rights are needed or delegated control for non-admins.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> what kind of local rights doesa user need to disjoin a machine from
>>> domain and put into workgroup?
>>>
>>> Does it "have" to be local admin?
>>>

 

On Wed, 6 May 2009 09:19:38 -0700, "Joey" <joey@joey.com> wrote:

>Its a windows xp machine on the domain that I want to put into workgroup
>mode. Why do I need domain admin rights for that?

You need local admin right to remove the PC to a workgroup but these right
cannot change AD. For that you need permission to modified AD and that is
usually done using a domain admin account.

The local admin could remove move the PC to the workgroup but would leave the
computer account in AD. A different Domain admin could later delete the old
computer account.


>"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>news:ff16fb6622d988cb9c44cea08f2d@msnews.microsoft.com...
>> Hello joey,
>>
>> Yes. And if you like to remove the account form the domain, domain admin
>> rights are needed or delegated control for non-admins.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> what kind of local rights doesa user need to disjoin a machine from
>>> domain and put into workgroup?
>>>
>>> Does it "have" to be local admin?
>>>
>>
>>
>
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.