Only show and allow logon into Domain...

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi,

1. How to only show and allow logon into Domain, basically I have local accounts on the laptop which I joined to domain and now I would like to prevent users from logon "to this computer"
- I've set in GPO "deny logon locally" but this prevent me login into domain instead

I could delete local accounts but this is simple way

2. Another problem is with existing local profiles on this laptop, Can I copy existing, local profiles on the laptop from the server or I have to do it directly on the laptop?

3. Is it possible to remotely install MS office packet via GPO => software installation

 

Hello,

- The problem is that the user has also admin local account...

- could you help me with this, I created such a group but I donot know how to actually prevent users from logon locally via this settings

I've managed to install Mozilla firefox but I have a problem with office as no one of msi files working...
Is there any way to set configuration for this, for example change the path for firefox installation or preconfigure it like default/home website ect.

 

Change the password?

 

Yes I know, I could even delete this account but as I wrote before i would like to only show and allow logon into Domain, if it's possible ;)

 

Take him out of the local admins group, change the password as previously suggested or delete the account.

As far as I remember, you can always log on locally if you use the admin account or are a member of the admins group, even if the local gpo is set to deny log on locally. Therefore the only way would be to remove the admin rights from the user.

I don't think there is any way around this. You should always be able to log on locally, hence the choices of the domain or the local pc.

 

I haven't got access to an XP machine where I am at the moment, although I think there is a "deny local log on" GPO you can push out.

 

I'm fairly sure Nugget is right here. Think about it, it you were able to lock down a machine to completely prevent local login, then the machine is a brick if it ever develops a networking issue. You cant log on to diagnose.

 

This is my thinking on it as well, local logon is almost always required by admins at some point. For instance I had a machine recently that suffered a virus infection which flooded our out going net connection (fun to clean up ) I took the machine off network, logged in locally and ran the in depth virus scan necessary to remove the bastard thing.

Delete the account or change the password.

 

Ok thank you for all help, one more question:

How to allow users install software/programs?

 

Give them admin rights.

Just kidding. That's what helpdesk, network and system admins are for. If you start letting the users install porgrams then after the first couple of "legitimate" installs you'll end up with all sorts of spyware, crapware and viruses in the system.