回复：f64等专家：ZoneAlarm能不能防住domain网管？

like tty said, this is not just a technical issue. the sysadmin is not only superior to you in the technical respect, but also superior to you with respect to administration.

say if you are the local admin, you can simply disjoin your pc from the domain then he has no access to it. but he can simply tell you: this is not allow by the department policy. any machine connected to the department lan must join the domain and under my supervision. if you do that again, I will disconnect you pc from the LAN, or remove you from local admin group, savvy?