GPO to prevent logon

GPO to prevent logon
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
GPO to prevent logon Ziguana 02-19-2006
Posted by =?Utf-8?B?WmlndWFuYQ==?= on February 19, 2006, 9:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have a number of laptop users that I want to lock down, they can currently
disconnect there laptops from the domain and still logon with the same
password when out of the office.

I want to disable this and use hardware profiles seting up a local account
for them to login with.

Problem is they will still be able to login with there domain account, there
must be away to disable logon if network isn't present but I can't find the
setting, can someone point me in the right direction.

Thanks in advance

Posted by Byron Hynes [MS] on February 19, 2006, 11:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
What security risk are you reducing by requiring them to use two accounts?

Byron Hynes
Windows Server
Microsoft Corporation

http://spaces.msn.com/members/byronphynes

> I have a number of laptop users that I want to lock down, they can
> currently disconnect there laptops from the domain and still logon
> with the same password when out of the office.
>
> I want to disable this and use hardware profiles seting up a local
> account for them to login with.
>
> Problem is they will still be able to login with there domain account,
> there must be away to disable logon if network isn't present but I
> can't find the setting, can someone point me in the right direction.
>
> Thanks in advance
>



Posted by Roger Abell [MVP] on February 20, 2006, 10:33 am
If you were  Registered and logged in, you could reply and use other advanced thread options
If you set the number of cached passwords to zero then they will
not be able to log in if a domain controller cannot be contacted.
They will however be able to log in with the local account at any
time (i.e. when connected to the corp net).
No use of hardware profiles is involved in this.

>I have a number of laptop users that I want to lock down, they can
>currently
> disconnect there laptops from the domain and still logon with the same
> password when out of the office.
>
> I want to disable this and use hardware profiles seting up a local account
> for them to login with.
>
> Problem is they will still be able to login with there domain account,
> there
> must be away to disable logon if network isn't present but I can't find
> the
> setting, can someone point me in the right direction.
>
> Thanks in advance



Similar ThreadsPosted
Security settings on the Terminal Server prevent automatic logon September 12, 2005, 3:18 am
0x80070569: Logon failure: the user has not been granted the requested logon type at this computer. December 22, 2005, 9:06 am
Logon failure: the user has not been granted the requested logon t October 3, 2006, 1:54 am
"logon as a service" and "logon as a batch job" September 2, 2006, 6:14 am
How to prevent exploits June 23, 2007, 8:25 am
How to disable/prevent p2p bittorent ? July 11, 2005, 11:41 pm
Prevent files from being copied August 25, 2005, 9:01 am
How to prevent stealing password September 23, 2005, 7:45 am
Prevent access to certain websites June 16, 2006, 11:14 am
Prevent Unauthorized PCs to connect on the LAN August 7, 2007, 1:33 pm

The site map in XML format XML site map

Contact Us | Privacy Policy