Windows: Does admin have access local disk to pc that joined AD server?
I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: access to local disk and get files on the pc, install whatever softwares they want?
Is that possible?
windows active-directory window
asked 4 hours ago
Tuyen PhamTuyen Pham
1589
add a comment |
I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: access to local disk and get files on the pc, install whatever softwares they want?
Is that possible?
windows active-directory window
asked 4 hours ago
Tuyen PhamTuyen Pham
1589
1
Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.
– Ramhound
4 hours ago
add a comment |
I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: access to local disk and get files on the pc, install whatever softwares they want?
Is that possible?
windows active-directory window
asked 4 hours ago
Tuyen PhamTuyen Pham
1589
I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: access to local disk and get files on the pc, install whatever softwares they want?
Is that possible?
windows active-directory window
windows active-directory window
asked 4 hours ago
Tuyen PhamTuyen Pham
1589
asked 4 hours ago
Tuyen PhamTuyen Pham
1589
asked 4 hours ago
Tuyen PhamTuyen Pham
1589
asked 4 hours ago
Tuyen PhamTuyen Pham
1589
asked 4 hours ago
Tuyen PhamTuyen Pham
1589
1589
1
Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.
– Ramhound
4 hours ago
add a comment |
1
Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.
– Ramhound
4 hours ago
1
1
Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.
– Ramhound
4 hours ago
Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.
– Ramhound
4 hours ago
add a comment |
1 Answer
1
active
oldest
votes
In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.
answered 4 hours ago
TimTim
472210
@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.
– Ramhound
2 hours ago
Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.
– Tuyen Pham
2 hours ago
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1396448%2fwindows-does-admin-have-access-local-disk-to-pc-that-joined-ad-server%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.
answered 4 hours ago
TimTim
472210
@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.
– Ramhound
2 hours ago
Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.
– Tuyen Pham
2 hours ago
add a comment |
In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.
answered 4 hours ago
TimTim
472210
@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.
– Ramhound
2 hours ago
Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.
– Tuyen Pham
2 hours ago
add a comment |
In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.
answered 4 hours ago
TimTim
472210
In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.
answered 4 hours ago
TimTim
472210
answered 4 hours ago
TimTim
472210
answered 4 hours ago
TimTim
472210
answered 4 hours ago
TimTim
472210
472210
@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.
– Ramhound
2 hours ago
Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.
– Tuyen Pham
2 hours ago
add a comment |
@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.
– Ramhound
2 hours ago
Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.
– Tuyen Pham
2 hours ago
@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.
– Ramhound
2 hours ago
@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.
– Ramhound
2 hours ago
Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.
– Tuyen Pham
2 hours ago
Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.
– Tuyen Pham
2 hours ago
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1396448%2fwindows-does-admin-have-access-local-disk-to-pc-that-joined-ad-server%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.
– Ramhound
4 hours ago