General discussion


Forcing users to logon to domain.

By sarikakaushal ·
Recently we have migrated to Windows 2000 domain from workgroup model. I have problem, how can I force users to logon to Windows 2000 domain as they can logon to their local machine also.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Forcing users to logon to domain.

by Craig IT Mangaer In reply to Forcing users to logon to ...

Two things quickly come to mind.
First remove all the users from the local computer except the administrator and change the local admin password. And ensure (this should have happened by default) that the domain admins are part of the local administrator group.
Next, if there are no resources available to them while logged on locally, they would have more reason to logon to the network.
And last, if you want to get them pointed in the right direction, you can go into the windows registry and edit the logon information so that by default the next time they logon it will point them to the domain with their username. path is:
hkey_local_machine\software\microsoft\windows nt\current version\winlogon. If you have logged onto this machine as a domain admin the only thing you'll need to change is the AltDefaultUserName key and the defaultusername key and then you could also set the showlogonoptions key to 0 so that they don't "see" that they are logging onto the domain vs. their local account (which at this point wouldn't exist anyway).

Collapse -

Forcing users to logon to domain.

by maxwell edison In reply to Forcing users to logon to ...

When I create a user, I create it as a domain user. For example, John Doe is, first of all, a user I have created on the domain server (along with all my other users). When I create his account on his client machine, he's created as JonhDoe@DomainName.

And to keep John Doe from exploring other options, you can simply remove the options button from the logon screen. But this is not really necessary, since John Doe is a domain user, not a local user. However, if you want to, an easy registry edit will do that.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Double-click the ShowLogonOptions value name in the right-hand pane. This REG_DWORD data type can be set to:

0 - to hide the options when the dialog opens.

1 - to display the options when the dialog opens. This is the default.

Of course, it should go without saying, back-up the registry before doing anything in there - just in case.

Collapse -

Forcing users to logon to domain.

by sarikakaushal In reply to Forcing users to logon to ...

We have around 700 machines and it will not be possible to individually go on each machine and make changes. Is there any centralised way of doing it. Like if one's user logs in to domain next time he/she has no option but has to logon to domain only. Can we do this using GPO.

Related Discussions

Related Forums