Security Basics: Re: Alert when a new PC joins the domain

[Sorin DANULESCU <sorin_danulescu () yahoo com>]

In a Windows domain, even a user that is not an admin, can join a 
computer to a domain.
The maximum number of computers than can be added by a user is 10 .

Their principle is that if you are a good Active Directory admin, even 
if a user joins a pc into domain, he
cannot do anything dangerous because you have a good security policy and 
group policy.
As a plus, Microsaft is saying that once the computer is in domain... it 
is all yours. So you got control over it.
More details are here:
http://support.microsoft.com/kb/243327/en-us




On 08/01/2011 10:15 PM, Kimalat, Kipngetich wrote:
> Well a user that tries to join a computer to  a domain would need to be either an admin, or apart of the administrators 
> group in order to provide login details to join. And you can always log this in the event viewer, under the security 
> log. This information of course can be collected from remote machines and forwarded to the one of your choosing. Alerts 
> can be generated per email, all of this assumes of course that you are using Win2k3 or above, servers and xp and up 
> clients.
------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------