In the control panel under network setup set the Must be validated by NT domain. (This can also be set by a registr edit. (Do a board search for the exact key.) Then if they change the domain the machine will not let them login.
This has been discussed several times on the board. Try doing a search.
_________________________
Jack
