Windows Tip: Preventing removal from a domain

By Mitch Tulloch, MTIT Enterprises

By default, any authenticated users on an Active Directory-based network can add a Windows XP workstation to a domain. In fact, they can create up to ten computer accounts in the domain if they want to. As an administrator, you can use Group Policy to manage who in your organization has the right to join workstations to the domain by configuring the Add Workstations To Domain policy setting, which is found under Computer Configuration/Windows Settings/Security Settings/Local Policies/User Rights Assignments.

Here's how to configure this setting.