Re: Deny Logon Locally

From: Joe Richards [MVP] (humorexpress@hotmail.com)
Date: 08/01/02


From: "Joe Richards [MVP]" <humorexpress@hotmail.com>
Date: Wed, 31 Jul 2002 19:57:50 -0400


Don't give them local ID's on the computers and then they can only logon to
domain ID's... If they have admin access on the workstations you have no
easy options.

--
Joe Richards
www.joeware.net
---
"Justus" <justus@dotcool.com> wrote in message
news:ai9k8b$12aakk$1@ID-56130.news.dfncis.de...
> If I am using AD and want me users to have to logon to a the domain and
not
> logon to there computer locally is there something I can implement in a
> domain policy or group policy? I was reading about deny log on locally but
> was not sure if that prevented from logging on to the machine all
together.
> I don't want any of my users using any local users for the computers only
> logging on through the domain. What is the best way to implement this?
Some
> of the user already have administrator accounts locally so they know how
to
> create new local accounts. Any help or suggestions would be appreciated.
> -Thanks
> Justus
>
>


Relevant Pages

  • Re: Track Domain User Logons and Logoffs
    ... >>In Kerberos, computers are actually logging in and out, ... > principal logging in. ... > logon and which to the logoff... ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Unable to logon interactively.
    ... administrator user account to logon. ... You may check the default domain policy to confirm that the Log on Locally ... Start the Active Directory Users and Computers snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: Making the case for not installing DCs on remote sites (2xT1 links)
    ... 25,000 users;-) and I don't know how may servers -4,000 perhaps. ... I think that the logon ... >>>>to logon from branch offices where I have no DC+GC there. ... >>>>offices with more than 60 computers. ...
    (microsoft.public.win2000.active_directory)
  • Re: User Login
    ... the user account will be able to logon remotely even though they ... the domain group called Domain Users is a member of the local ... Users group on all computers; this is usually why any domain user can ... put those user accounts into domain group and apply a GPO to the OU ...
    (microsoft.public.windows.server.active_directory)
  • Re: Slow startup after logon
    ... the other computers are just my house computers. ... "John John" wrote: ... At school when you logon you are not connected to any other ... You can enable "verbose logging" and you might find out what ...
    (microsoft.public.windowsxp.general)