How to restrict domain users from removing computers from domain?

[Guest Hana Wudu]

Hello there, I got issue with domain users able to remove computers from domain. when i try to change the domain, a request will popup to enter administrator and domain user accounts returns "require elevation" so i will pass the request with local admin account. after that I selected workgroup option and request will popup with "Enter account with permission to remove this computer from domain" and when I enter the domain user account which returned "require elevation" earlier (and which doesn't have domain admin, delegation control and local admin right) it will allow it to remove the compu

 

Continue reading...