Questions

Local Login in Windows Domain

+
0 Votes
Locked

Local Login in Windows Domain

tomjoseph
I am using a Windows 2003 Server and all clients are using Windows XP workstations. I want to know if there is some way I can prevent users from logging on locally to their PCs so that they log in only to the domain.I found many users logging in as local administrators. How do i Stop this.?
  • +
    0 Votes
    Churdoo

    There should not be local user accounts. There should be the local Administrator account which should have a non-blank password known only by network admin(s), and that's it.

    Remove all local accounts from the PC's, make sure the local guest account is disabled, reset the local admin password, and don't give the users local admin access to their PC's.

    +
    0 Votes
    p.j.hutchison

    churdoo is correct. You can reset the admin password on all PCs to a one you know only by running a startup script (or preferably an .exe program) to auto change the administrator password.

    +
    0 Votes
    Alfa11

    You can apply a GPO that avoids users from logging locally on the PCs.

  • +
    0 Votes
    Churdoo

    There should not be local user accounts. There should be the local Administrator account which should have a non-blank password known only by network admin(s), and that's it.

    Remove all local accounts from the PC's, make sure the local guest account is disabled, reset the local admin password, and don't give the users local admin access to their PC's.

    +
    0 Votes
    p.j.hutchison

    churdoo is correct. You can reset the admin password on all PCs to a one you know only by running a startup script (or preferably an .exe program) to auto change the administrator password.

    +
    0 Votes
    Alfa11

    You can apply a GPO that avoids users from logging locally on the PCs.