From: aral@nurfuerspam.de   
      
   Title says it all: Just by joining the machine to a domain, how much   
   control do domain admins get over the system?   
      
   e.g.:   
   - can they control update rollouts to the domain clients?   
   - can they remote access administrative shares (\\machine\c$,   
   \\machine\d$ etc)?   
   - can they manipulate the registry settings?   
   - can they use remote Desktop services?   
      
   If the answer is "yes" to my first example, I guess that would mean full   
   control over the computer...   
      
   Next question would be: Is it possible to lock out domain admins from   
   your computer (completely) if you don't trust them? Given of course that   
   you have local administrator rights and join the machine to the active   
   directory yourself...   
      
   And how would you do that if it is possible?   
      
   Happy for any help!   
      
      Lars   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)