Windows: Does admin have access local disk to pc that joined AD server?












1















I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: access to local disk and get files on the pc, install whatever softwares they want?



Is that possible?






windows active-directory window







share|improve this question


















  • 1





    Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.

    – Ramhound
    3 hours ago
















1















I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: access to local disk and get files on the pc, install whatever softwares they want?



Is that possible?






windows active-directory window







share|improve this question


















  • 1





    Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.

    – Ramhound
    3 hours ago














1












1








1








I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: access to local disk and get files on the pc, install whatever softwares they want?



Is that possible?






windows active-directory window







share|improve this question














I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: access to local disk and get files on the pc, install whatever softwares they want?



Is that possible?






windows active-directory window




windows active-directory window






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked 4 hours ago









Tuyen PhamTuyen Pham

1589




1589








  • 1





    Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.

    – Ramhound
    3 hours ago














  • 1





    Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.

    – Ramhound
    3 hours ago








1




1





Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.

– Ramhound
3 hours ago





Yes; If the PC is joined to the domain, then any user on the domain, can log into the machine. Additionally, the domain administrator could, remotely connect to the machine.

– Ramhound
3 hours ago










1 Answer
1






active

oldest

votes


















2














In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.






share|improve this answer
























  • @TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.

    – Ramhound
    1 hour ago













  • Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.

    – Tuyen Pham
    1 hour ago











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1396448%2fwindows-does-admin-have-access-local-disk-to-pc-that-joined-ad-server%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









2














In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.






share|improve this answer
























  • @TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.

    – Ramhound
    1 hour ago













  • Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.

    – Tuyen Pham
    1 hour ago
















2














In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.






share|improve this answer
























  • @TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.

    – Ramhound
    1 hour ago













  • Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.

    – Tuyen Pham
    1 hour ago














2












2








2







In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.






share|improve this answer













In short yes. The AD administrator(s) has full administrative access to that machine, and to your files. If the AD Admin wanted or needed to, they could also remove your privileges, and make adjustments without your knowledge or permission.







share|improve this answer












share|improve this answer



share|improve this answer










answered 3 hours ago









TimTim

472210




472210













  • @TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.

    – Ramhound
    1 hour ago













  • Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.

    – Tuyen Pham
    1 hour ago



















  • @TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.

    – Ramhound
    1 hour ago













  • Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.

    – Tuyen Pham
    1 hour ago

















@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.

– Ramhound
1 hour ago







@TuyenPham - Only an Administrator on the machine can remove a machine from an Active Directory domain. Even if you only use a local machine, once the machine was added to the domain, any domain user can log into the machine. Without being an Administrator on the domain there is nothing you can do to prevent that.

– Ramhound
1 hour ago















Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.

– Tuyen Pham
1 hour ago





Does it require anything to add a pc to an Ad? Because if I unregis it and someone freely to add it back to AD, it's a problem.

– Tuyen Pham
1 hour ago


















draft saved

draft discarded




















































Thanks for contributing an answer to Super User!


  • Please be sure to answer the question. Provide details and share your research!

But avoid …



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1396448%2fwindows-does-admin-have-access-local-disk-to-pc-that-joined-ad-server%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

Popular posts from this blog

Knooppunt Holsloot

Image
Knooppunt Holsloot Kenmerken Wegen A37 × N34 Type knooppunt klaverblad Portaal     Verkeer & Vervoer Knooppunt Holsloot is een verkeersknooppunt op de kruising van de autosnelweg A37 en de N34 in Drenthe, tussen Emmen en Coevorden. Oorspronkelijk was deze aansluiting een afritconstructie van het type Haarlemmermeeraansluiting, zoals bij Knooppunt Hooipolder. Sinds 2002 is het knooppunt omgebouwd tot een volledig klaverblad. Als noviteit werd hier voor het eerst gebruikgemaakt van dimbare verlichting in plaats van de normale vaste tijden waarop de verlichting aan en uit gaat, wat een grote kostenbesparing opleverde. [1] Dat Holsloot als volwaardig knooppunt is uitgevoerd, waarbij alle verkeersstromen en afbuigingen ononderbroken kunnen doorgaan, is uitzonderlijk. Het betreft hier namelijk een aansluiting tussen een autosnelweg en niet-snelweg. Een vergelijkbare situatie treft men nabij Hoensbroek bij het knooppunt Ten Esschen.     Aa
Read more

Altaar (religie)

Image
Deel van de serie over kerkelijk gerei waaronder paramenten en liturgisch vaatwerk gebruikt in de liturgie Liturgisch vaatwerk Vasa sacra Miskelk · Pateen Kelklepeltje Ciborie · Monstrans Pyxis · Custodiale Vasa non sacra Ampullen · Wijwatervat Olievaatje Wierookvat · Ablutievat Paramenten Amict · Albe · Baarkleed · Cingel Tuniek · Dalmatiek · Fanon Kazuifel · Manipel · Stola Gremiale · Benedictievelum Mijter Koorkledij Rochet · Superplie Koorkap · Cappa magna Kovel Kelkgerei Bursa · Kelkvelum Ciborievelum Kerklinnen Corporale · Kelkdoekje Lavabodoekje · Palla Altaardwaal Kerkinterieur Altaar · Ambo Biechtstoel · Communiebank Doksaal · Doopvont Faldistorium Godslamp · Hoogaltaar Heilig Kruisaltaar Katheder · Preekstoel Sedilia Tabernakel · Volksaltaar Liturgische boeken Altaarmissaal Benedictionale · Brevier Evangeliarium · Evangelistarium Graduale · Kyriale Lectionarium Psalter · Rituaal Sacramentarium · Volksmissaal Overige Flambou
Read more

Gregoriusmis

Image
Een afbeelding van de Gregoriusmis uit een getijdenboek gemaakt in de zuidelijke Nederlanden tussen 1500 en 1525 Gregoriusmis, Meester van het Akense Altaar, ca. 1500-1525. Collectie Museum Catharijneconvent De Gregoriusmis of de Mis van Sint Gregorius is een motief in katholieke kunst, dat het eerst verscheen in de late Middeleeuwen en dat nog steeds werd gebruikt tijdens de contrareformatie. Paus Gregorius I (ca. 540-604) is afgebeeld, de H. Mis opdragend, terwijl Christus als de Man van Smarten verschijnt op het altaar dat voor Sint Gregorius staat. Volgens de legende had St. Gregorius gebeden om een teken voor een betwijfelaar van de transsubstantiatieleer, waarop de lijdende Christus tijdens het opdragen van de Mis verscheen om hem te overtuigen en waarbij zijn bloed in de altaarkelk liep. Vaak zijn ook de passiewerktuigen afgebeeld. Zie de categorie Mass of Saint Gregory van Wikimedia Commons voor mediabestanden over dit onderwerp. This page is onl
Read more