Re: How to force a user to logon to the domain ?

From: Herb Martin (news_at_LearnQuick.com)
Date: 10/02/03

  • Next message: Henri Feinberg: "Getting messages non stop,of type: Microsoft Technical Assistance [qlrlipu_rczpk@news.com]" 
    Date: Wed, 1 Oct 2003 18:35:21 -0500

    > We would like to force users to logon to the domain so all the scripts and
    > patches could be applied.
    >
    > The situation is this: there are no local accounts on workstations, users
    > have only a domain account. It is an NT4 domain, on workstations we have
    > Win2000Pro and WinXP. Now, my boss wants every user to be a local
    > administrator on his/her computer so we put their domain account to be a
    > member of the local Administrators group. This gives them possibility to
    > logon locally on their computers.

    Putting their DOMAIN accounts in the Local Administrators group rather than
    giving them a "new" (and different) account should work fine.

    > Now, we are planning to migrate to Win2003 servers so I was thinking that
    > this script can be applied using GPOs. But it will be applied to users or
    > computers only if they logon into the domain.

    You can also setup Local GPOs if you want to go to the trouble for each
    machine.

    You can also use "Security Templates" for anything in the security area of
    Group Policy.

    > The other solution someone mentioned to me is to configure DHCP server to
    > give IP addresses to authenticated users only, but I still didn't find a
    way
    > to this either.

    Doesn't exist -- DHCP is promiscuous (for the most part.)

    > Can you give me some advice about these things? 

    -- 
Herb Martin
  • Next message: Henri Feinberg: "Getting messages non stop,of type: Microsoft Technical Assistance [qlrlipu_rczpk@news.com]"

    Relevant Pages

    • Re: Remotely create a drive on multiple computers
      ... > member of the local administrators group on each of the 50 computers. ... under your own account (whichever tool you used) no one else on the remote ... the current local user. ...
      (microsoft.public.windows.server.scripting)
    • RE: Client setup
      ... this issue happens when the logon user is not in the client ... computer's local Administrators group. ... Logon locally as a local administrator, or logon to the domain a domain ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • TS Logon Restriction by hours
      ... Does anyone know a way of restricting a given 2003 domain account ... so that it can only logon to a Windows 2000 Terminal Server during a certain ... 'Logon Hours' restrictions for a domain account (as these would ... prevent the account from logging into the network at all during this ...
      (microsoft.public.windows.terminal_services)
    • RE: Service account and logon as service permission.
      ... This is a domain account call it PPC\test. ... But I still get a logon failure. ... MMC and go to the Log on tab and change the user and password I get a message ... Do I need to modify the domain policy, ...
      (microsoft.public.platformsdk.security)
    • Re: Domain logon after sysprep
      ... Auto domain logon after sysprep seems to be not possible. ... During the local logon you can execute a script with the ... I need to autologon using a domain account, ...
      (microsoft.public.windowsxp.setup_deployment)