如何限制域基网络中的网络管理员

Question

在域下的网络中，客户端具有完整的管理功能 网络管理员如何限制访问？ 正如已经看到的那样，日志客户端站点 - 客户端当前正在进行的活动 - 访问系统文件和.... （假设网络管理员使用的互联网流量监控器的vpn不可及）

Answer 1

To controll access to files and other resources like printers, use active directory users and computers which can create groups that you can then apply permissions to, you can add those groups to objects security which can explicitly or implicitly grant or deny access. For other stuff use group policy (gpedit.msc) and look at the default domain policy. For loging activities look at auditing under group policy and the logs are in the event viewer.

your question is still vague but i jope this helps, just google the topics.