Deny Logon Locally

From: Justus (justus@dotcool.com)
Date: 07/31/02 

From: "Justus" <justus@dotcool.com>
Date: Wed, 31 Jul 2002 17:23:21 -0400

If I am using AD and want me users to have to logon to a the domain and not
logon to there computer locally is there something I can implement in a
domain policy or group policy? I was reading about deny log on locally but
was not sure if that prevented from logging on to the machine all together.
I don't want any of my users using any local users for the computers only
logging on through the domain. What is the best way to implement this? Some
of the user already have administrator accounts locally so they know how to
create new local accounts. Any help or suggestions would be appreciated.
-Thanks
Justus

Relevant Pages

  • Re: Deny Logon Locally
    ... would also like to add all together deny local users logon. ... locally or on a DC under Domain Policy user rights? ...
    (microsoft.public.win2000.security)
  • RE: Cant manage Local Users and Groups on Win2K terminal server
    ... Then it seems that your GPO isn't applied as you want it, ... Domain Policy, but I assume you mean that you undo the settings? ... If I logon on locally, ... >> managing Local Users and Groups enabled. ...
    (microsoft.public.windows.terminal_services)
  • Re: Deny Logon Locally
    ... > If I am using AD and want me users to have to logon to a the domain and not ... > domain policy or group policy? ... > was not sure if that prevented from logging on to the machine all together. ... Ensure that the users do not have local accounts or cached ...
    (microsoft.public.win2000.security)
  • Re: Deny Logon Locally
    ... Don't give them local ID's on the computers and then they can only logon to ... > domain policy or group policy? ... > logging on through the domain. ...
    (microsoft.public.win2000.security)
  • Re: Login Errors Seem to indicate we are being hacked?
    ... I have turned on diagnostic logging on SMTP. ... we could turn something off on our own SMTP server to stop the devils from ... Logon Failure: ... Caller User Name: SERVER01$ ...
    (microsoft.public.windows.server.sbs)