Quote:

2. Users could elevate their permission and kick you off.



Then remove their computer from the Domain and disable their port at the switch. Then when they call the helpdesk say you're checking into the problem but don't do anything to fix it for a couple days.

After a couple times of that action, they get tired of it and won't remove your Domain Account.

Les,
I think you need to let some of your workers go, they don't appear to be office workers but rather young kids that like to think they can hack.