Networks

Ask something
Discussion Locked

Only show and allow logon into Domain

0 helpful
1 reply

by eyespan

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have been playing around with and XP Pro laptop that has been joined to a domain. What I would like to do for all our workstations/laptops (all of which have been joined to our domain) is to disable and hide their ability to log on locally to the computer. Only the Domain would show as available for login.

I have played with the Local Security Policy area log On Locally and thought I might remove all entries there except a Domain user. Any help or advice would be appreciated.

1 reply

by rewrite

You can use the GPO to Deny Logon Locally to restrict any local logon. You'd have to test this with a laptop after the policy was set if it still applied while off the domain. I don't think there's any way to prevent the user from typing in a local logon but once the policy is applied it should prevent the logon from completing.

Cheers.

RW

This discussion is closed to new replies.