There is risk in both scenarios. For most scenarios, the answer will be more risk by joining the domain, but more details are needed to ascertain which risk is greater, and the likelihood is that the answer would vary over time.
Besides, this is almost a "which is worse, heart attack or stroke?" question. There's no good answer there. Best to avoid both problems. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Wed, Jun 20, 2012 at 1:31 PM, Kennedy, Jim <[email protected]>wrote: > I have thought about this before...so I am going to toss it out there and > see how it gets swatted down. > > If a staff member brings in a home laptop and joins it to the domain is it > more of a threat or less of a threat than not being in the domain and just > plugged into the network. I ask because here after they reboot they will > get all the patches, up to date AV software and no-one except IT Staff will > be a local admin. Most won't even be able to get to a command prompt. > > -----Original Message----- > From: Kurt Buff [mailto:[email protected]] > Sent: Wednesday, June 20, 2012 1:17 PM > To: NT System Admin Issues > Subject: Re: How many in your company can join systems to domain > > By default yes, unless you turn it off, which, IMHO, is the sane thing to > do... > > On Wed, Jun 20, 2012 at 8:30 AM, Webster <[email protected]> wrote: > > I haven't had to deal with this in a long time but IIRC anyone who is > > in Domain Users can join up to 10 computers to your domain. > > > > http://support.microsoft.com/kb/243327 > > > > > > Carl Webster > > > > Consultant and Citrix Technology Professional > > > > http://www.CarlWebster.com > > > > > > From: David Lum <[email protected]> > > Reply-To: NT Issues <[email protected]> > > Date: Wednesday, June 20, 2012 8:19 AM > > To: NT Issues <[email protected]> > > Subject: How many in your company can join systems to domain > > > > Subject line pretty much says it. We have 600 employees and an IT > > staff of 50-ish (including developers) and I swear all 50 can join > > systems to the domain. Certainly 10 of them can and that seems like a > lot. > > > > > > > > Brought up because these guys drive me crazy by loosely following > > naming standards, not moving to the appropriate OU, and not putting > > descriptions in AD. > > > > David Lum > > Systems Engineer // > > NWEATM > > Office 503.548.5229//Cell (voice/text) 503.267.9764 > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
