The connectcomputer wizards makes all domain users local adminisitrators on the client - as you deleted the client on SBS, recreated it, and then used the connectcomputer, then the client was effectively new to SBS and thus put the domain user in the local admin group on the client. You'll need to manually remove the domain user from the local admin group on each client (put them in the local Users group).

 

I think this is right, but no doubt someone will be along to correct me if I'm not!

Hi guys,

 

Not completely correct. By default connectcomputer adds the group Domain Users to the local Users group on the computer, which enables all domain users to log onto that computer. During the connectcomputer process you have the option to assign domain users to the computer. Only the assigned users will be added to the local Administrators group on the computer, and of course the domain admin will be added to that group always.

Hi Simon,

 

Than you should start using it, as connectcomputer is doing a lot more than you think.