List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: Thnks Guys.... [ActiveDir] ADS help needed

Prev Next

You are not authorized to post a reply.

Author

Messages

sbdcunha

Posts:52

02/19/2010 7:04 PM
Dear All, Thanks Guys for the real quick reply. and sorry for toppin the post Maybe earlier was not clear asto what i want I would like to do for all our workstations/laptops (all of which have been joined to our domain) is to disable and hide their ability to log on locally to the computer. Only the Domain would show as available for login. and if so where in which option in the policy Appreciate you king advice and help regards simon > Correct, even you modify the GINA, the DownlLevelName logon i.e > workstationname\username will still allow users to bypass. > > On Fri, Feb 19, 2010 at 12:08 PM, Eric <seag33k@gmail.com> wrote: > >> I am not sure of there is an exact policy, but if the option was not >> available, couldn't they just use localworkstation\user as their login >> ID to >> by pass it if the option for domain wasn't listed? >> >> >> >> 2010/2/19 Benedict simon <simon@kmun.gov.kw> >> >> >>> Dear ll, >>> >>> I have recently installed Win2003 as my primary ADS server configured >>> DNS >>> and users are succesfully able to login and the user workstation can >>> succesfully join the domain >>> >>> Now i do have to implement some policies and the most important one is >>> to >>> force mandotry login to the domain >>> >>> to be more clear .. >>> >>> After the users computers joins the AD server can the machines local >>> administrators log on be disabled >>> what i mean is on the welcome screen the option to logon locally should >>> be >>> hidden or no option avaliabe. >>> >>> is there any policy that will help me do this >>> >>> pprecite your help and advice or if there is some link that can help me >>> achieve this >>> >>> Thanks and regards >>> >>> >>> simon >>> >>> >>> >>> -- >>> Network ADMIN >>> ------------- >>> KUWAIT MUNICIPALITY: >>> >>> >>> -- >>> This message has been scanned for viruses and >>> dangerous content by MailScanner, and is >>> believed to be clean. >>> >>> >>> >> > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- Network ADMIN ------------- KUWAIT MUNICIPALITY: -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > Thnks Guys.... [ActiveDir] ADS help needed

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads