Re: what do I do?


"timj" <timj@xxxxxxxxxxx> wrote in message
news:ubQ0dgkbHHA.4176@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I work for a School Board and lately we have found that the kids can by
pass the GPO's. They put their login id and password in then ok, to
login. Once the login process starts they unplug the ethernet cable, they
get a few errors about their profile but now have full access to their
local pc.

Is there a way to stop it?

We use Windows 2000 server and Windows 2003 server.

Thanks

T.

There are a few tricks, like a login script that checks
for a mapped drive (such as to sysvol ?) and if it does
not exist does a logoff, if it does disconnects the share.
There is a group policy setting that requires background
application of policy to be disallowed (i.e. require that
policy is processed synchronously).
One could disable local caching of past logins (set the
number of logins cached to 0)



.

Relevant Pages

  • Re: ASP.NET User.Identity.Name value after a domain username chang
    ... Since .NET is just calling into Windows API calls to resolve the user name, ... I have an ASP.NET application that is on a Win2000 server in a domain ... I have a very confusing issue when the domain login of a user is ... I thought this might have been some caching issue on the client so I ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: CAN WE LOGIN TO A WINDOWS 2003 ACTIVE DIRECTORY DOMAIN OVER TH
    ... Having a user login to a windows 2003 server over the internet is not a good ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win2003 Console Login Screen Black- Cant Log In
    ... it discovered the existing install, ... > I've got a Windows 2003 Standard server. ... This is also our Veritas Netbackup server. ... > black screen with only part of the login prompt showing. ...
    (microsoft.public.windows.server.general)
  • Re: CAN WE LOGIN TO A WINDOWS 2003 ACTIVE DIRECTORY DOMAIN OVER THE IN
    ... If I create a user in active directory in windows 2003 server, ... login to that user using windows xp login dialog box within the network ... and you can resolve DNS from the point of view of an INTERNAL ...
    (microsoft.public.windows.server.active_directory)
  • Re: Locked out of Enterprise Manager
    ... When you went into the Server Config and changed it to Windows Auth you did ... stopped working is that it didn't know what login to connect with. ...
    (microsoft.public.sqlserver.security)