How can I apply GPOs to non-domain computers to make sure they don’t get on our domain?
How can I apply GPOs to non-domain computers to make sure they don't get on our domain?
Software/Hardware used:
Windows Server 2003, Windows XP
Software/Hardware used:
Windows Server 2003, Windows XP
ASKED:
February 23, 2010 7:58 PM
UPDATED:
February 25, 2010 9:42 PM
RELATED QUESTIONS
Answer Wiki:
SiThu 450 pts. | Feb 24 2010 2:15AM GMT
But you may make script that apply to individual computer’s registry and apply to each manually.
Technochic 43440 pts. | Feb 24 2010 5:32PM GMT
SiThu is correct if you know the computer and can apply the script directly to it. If you want to prevent computers you have no knowledge of from joining your domain your domain itself will prevent this unless the computer is added by someone who has permissions to join computers to the domain. Computers can’t join the domain without those permissions. And those who have the permissions to join computers to the domain should only be adding those that have been approved. If there is a problem there, that is another issue entirely you will need to address concerning those with the permissions to join pc’s to the domain.
To see all answers submitted to the Answer Wiki: View Answer History.
But you may make script that apply to individual computer’s registry and apply to each manually.
SiThu is correct if you know the computer and can apply the script directly to it. If you want to prevent computers you have no knowledge of from joining your domain your domain itself will prevent this unless the computer is added by someone who has permissions to join computers to the domain. Computers can’t join the domain without those permissions. And those who have the permissions to join computers to the domain should only be adding those that have been approved. If there is a problem there, that is another issue entirely you will need to address concerning those with the permissions to join pc’s to the domain.
Are you asking about “joining your network” or “using your network”. It is possible to “use” your network without being on the domain. In this case the terms domain and network are not the same.