Re: Deny Logon Locally

From: Joe Richards [MVP] (humorexpress@hotmail.com)
Date: 08/01/02


From: "Joe Richards [MVP]" <humorexpress@hotmail.com>
Date: Wed, 31 Jul 2002 19:57:50 -0400


Don't give them local ID's on the computers and then they can only logon to
domain ID's... If they have admin access on the workstations you have no
easy options.

--
Joe Richards
www.joeware.net
---
"Justus" <justus@dotcool.com> wrote in message
news:ai9k8b$12aakk$1@ID-56130.news.dfncis.de...
> If I am using AD and want me users to have to logon to a the domain and
not
> logon to there computer locally is there something I can implement in a
> domain policy or group policy? I was reading about deny log on locally but
> was not sure if that prevented from logging on to the machine all
together.
> I don't want any of my users using any local users for the computers only
> logging on through the domain. What is the best way to implement this?
Some
> of the user already have administrator accounts locally so they know how
to
> create new local accounts. Any help or suggestions would be appreciated.
> -Thanks
> Justus
>
>


Relevant Pages

  • Re: Track Domain User Logons and Logoffs
    ... >>In Kerberos, computers are actually logging in and out, ... > principal logging in. ... > logon and which to the logoff... ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Unable to logon interactively.
    ... administrator user account to logon. ... You may check the default domain policy to confirm that the Log on Locally ... Start the Active Directory Users and Computers snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: Making the case for not installing DCs on remote sites (2xT1 links)
    ... 25,000 users;-) and I don't know how may servers -4,000 perhaps. ... I think that the logon ... >>>>to logon from branch offices where I have no DC+GC there. ... >>>>offices with more than 60 computers. ...
    (microsoft.public.win2000.active_directory)
  • Re: Slow startup after logon
    ... the other computers are just my house computers. ... "John John" wrote: ... At school when you logon you are not connected to any other ... You can enable "verbose logging" and you might find out what ...
    (microsoft.public.windowsxp.general)
  • Re: GPO Policy Auditing Solution
    ... group policy that only applies to a specific group, users or computers. ... > within the Domain Controller's OU and enable account logon auditing in the ... enable auditing for logon events. ...
    (microsoft.public.windows.server.networking)