List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] General Access Machines

Prev Next

You are not authorized to post a reply.

Author

Messages

AD00000893 User is Offline

Posts:0

09/19/2005 4:28 AM
My environment: Windows 2003 Active Directory Those managing labs for colleges/universities: How do you all manage and secure your open access labs? Currently my lab PCs have a single sign-on domain account that logs on automatically to the PCs. GPO locks down the machines pretty tight. This does not prevent anyone from walking in and use the machines, which I am trying to prevent. I could trust my domain with the main campus domain and have students log in using their college id/password. I like to maintain our independent from the main IT group as much as possible. Could I dump the LDAP database into my domain and have students log in as themselves? I have about 450-500 students. -Z.V. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

bdesmond

Posts:996

09/19/2005 5:29 AM
Trusting the campus domain and having students logon with their main username & password seems like the best and most logical solution. You could export all of the usernames from the campus domain, but you won't get the passwords. Giving people even more sets of credentials to remember is pretty counterproductive, so letting them use their campus account would make the most sense to me. Thanks, Brian Desmond brian@xxxxxxxxxxxxxxxx c - 312.731.3132 -----Original Message----- From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Za Vue Sent: Monday, September 19, 2005 12:27 PM To: ActiveDir@xxxxxxxxxxxxxxxxxx Subject: [ActiveDir] General Access Machines My environment: Windows 2003 Active Directory Those managing labs for colleges/universities: How do you all manage and secure your open access labs? Currently my lab PCs have a single sign-on domain account that logs on automatically to the PCs. GPO locks down the machines pretty tight. This does not prevent anyone from walking in and use the machines, which I am trying to prevent. I could trust my domain with the main campus domain and have students log in using their college id/password. I like to maintain our independent from the main IT group as much as possible. Could I dump the LDAP database into my domain and have students log in as themselves? I have about 450-500 students. -Z.V. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

prenouf

Posts:2

09/20/2005 12:24 PM
Message body was not found.

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] General Access Machines

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads