Lockdown?????

[CzarJunkie]

Just setup a VPN between Leeds and Manchester, its a Lan to Lan over L2TP, anyways, we got the 2 subnets in one active directory domain with a server at each end and a number of client machines, what I want to know is, can an xp pro client be completeley locked down with no remote access to it even by a domain administrator?

I'm able to disable the C$, D$ and admin$ shares via a registry hack, disable remote registry access, but that doesn't stop administrators remotely creating shares or remotely restarting my services via the Shared Folders and Services MMC snap ins.

Is there any tools, 3rd party or otherwise that will completeley lock xp pro down so that no remote administration is allowed?

Cheers............

[unclex]

Setup new admin accounts and restrict them, that should sort it out

So give the Admins, admin accounts in their profiles with restrictions.