Can my school (domain controller) access my laptop remotely if I'm logged in on a LOCAL Administrator account?

Question

Got issued a laptop by my high school today, and immediately realized that my domain account on the computer had Admin rights, so I immediately changed the password for the local Administrator account through the Control Panel and logged into that. The computer (Win 8.1) told me that if I logged into it it was a local connection, and not on the domain, but just to be sure the school can't track what I'm doing, I want to be sure that they can't remotely access the laptop when I'm logged in on a local administrator account. Also another thing to keep in mind is that while on the local account, I went to the control panel again, to system and security, and domain connections, and it still listed my school next to "Domain:"... Help!

Answer 1

There are different security levels software that could do variety of things. Things should be fine until you use personal and local admin account and using non domain internet, if you are in domain network, the story could be different. Since this is only a school I dont think the security level would be that high, but who knows.

Answer 2

As long as the computer is a member of the domain, administrators of the domain have full access to everything to you do on the computer, even under a local admin account. The only way to stop this is to remove the computer from the domain.

Answer 3

If it's on the network and they have rights, they can access it. It doesn't matter who (if anybody) is signed into it.



If you remove their rights, odds are there is a domain policy that would give them those rights back again the next time you plug it in. And if they see a machine that they can't access at all, they'll either block it from the network or simply reimage it.

Answer 4

Unless you remove/remove domain administrator from your local administrator's group, he/she can do whatever his privileged allows.



What YOU are logged into has nothing to do with what your domain admin can do. What YOU logged in as limits what YOU can do, and not what domain admin can do.



Typically, domain admin is setup as local admin as well. In that case, yes, he can "see" what you did.

Answer 5

that laptop is school property your not allowed to change any security settings