A user on my network (my predecessor in fact) disables the admin shares with a batch file that runs every time the computer starts up. I would like to disable this without the users knowledge. I would also like to do this remotely and at will. Is this possible?
This user no longer has an IT role in the company but likes to use their knowledge to circumvent our companies acceptable use policy. I have screen shots of the various files and folders that could serve as evidence, but I'm not sure how far I would get if I inform his superiors (office politics). Any suggestions on this front would be appreciated as well.
The machine in question is Windows 7 Pro 32-bit. We use Server 2003 for our Domain.
UPDATE: I used a GPO to disable the computers on my network from remembering the last user and then played the "I'm stupid, remember?" card when I feigned ignorance of why this was happening. I also discovered that if the computer is power cycled the shares are recreated (I knew this part) but aren't deleted until AFTER he logs on to the box in question. In retrospect I should have realized this.
I would still like any suggestions that I can use Group Policy on the Domain level to limit his destruction to his own box. I would also like to make sure that tosser can't log on to any computer in the network but his own.