Re: Auto Login

From: Alex Zhang (v-qiz_at_online.microsoft.com)
Date: 03/12/04


Date: Fri, 12 Mar 2004 10:27:57 GMT

Hello Dan,

Thank you for posting here.

Thank you for your sharing your experience here, Derek!
> Can I use a GPO to have a machine login automatically with a certain user
and password.

You may browse the following websites for more information:
HOW TO: Enable Automatic Logon in Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;310584
How to Enable Automatic Logon in Windows
http://support.microsoft.com/default.aspx?kbid=315231

> Can I disable IE with a GPO so users cant browse the web.

You may try the following steps to forbid users to browse websites.

1. Open the Group Policy -> User configuration -> Windows Settings
->Internet Explorer Maintenance -> Security
2. Double click "Security Zones and Content Ratings" in the right pane.
3. Click "Import the current Content Rating settings" in the Content
Ratings option -> Modify Settings
4. Click "Approved Sites" tab.
5. Input the web sites which you permit the users to browse.
6. Ok.

Also, you can remove IE content tab from IE option dialog

Group Policy -> User configuration -> Administrative Template->Windows
Components->Internet Explorer->Disable Content Page

In addition, you could use certain proxy or firewall software to manage the
user permissions.
I hope the information proves helpful!

If you have any questions please do not hesitate to let me know. I am glad
to be of assistance.
Thanks and regards,
Alex Zhang
Microsoft Partner Online Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Derek Melber [MVP]" <derekm@braincore.net>
| References: <uqghaA7BEHA.596@TK2MSFTNGP12.phx.gbl>
<eGOwXO7BEHA.1548@TK2MSFTNGP12.phx.gbl>
<ObRMJW7BEHA.596@TK2MSFTNGP12.phx.gbl>
| Subject: Re: Auto Login
| Date: Thu, 11 Mar 2004 15:34:45 -0700
| Lines: 59
| Organization: BrainCore.Net
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <eKHl2j7BEHA.2360@TK2MSFTNGP10.phx.gbl>
| Newsgroups: microsoft.public.win2000.group_policy
| NNTP-Posting-Host: ip68-108-192-159.ph.ph.cox.net 68.108.192.159
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:21427
| X-Tomcat-NG: microsoft.public.win2000.group_policy
|
| Your best bet is to open up one of the ADM templates on your computer and
| use that as a guide. It is very easy to see what they are doing in the
| template. The template is just text, so there is no compilation at all.
You
| only need to create an ADM template for your setting, which is under the
| HKLM registry handle key.
|
| Once you have it completed, you will just import it into a GPO. To do
this,
| edit the GPO, then right click on the Administrative Templates node in the
| GPO. You will see Add Template, then you can add in your new template.
|
| After it is added in, make sure you show ALL settings in the GPO, not just
| policies. Depending on which interface you are using, you might see
| different wording. However, the wording you are looking for says something
| like "Show only policies", which you don't want. You want to show policies
| and preferences, as they are called.
|
| --
| Derek Melber
| BrainCore.Net
| derekm@braincore.net
| "Dan" <Nospam@hotmail.com> wrote in message
| news:ObRMJW7BEHA.596@TK2MSFTNGP12.phx.gbl...
| > How do i go about creating my own GPO and what do i put in it.
| > thanks
| >
| > "Derek Melber [MVP]" <derekm@braincore.net> wrote in message
| > news:eGOwXO7BEHA.1548@TK2MSFTNGP12.phx.gbl...
| > > There is no GPO setting (that I can find or I remember) for Auto Admin
| > > logon. This is actually a large security hole, since the Password is
in
| > > clear text. However, there is no reason you can't create your own ADM
| > > template to do this. The Registry value you are changing is
| > Autoadminlogon.
| > >
| > > As for disabling IE, I don't think there is a "Disable IE" setting in
| the
| > > GPOs. However, you can create a Software Restriction Policy to disable
| > > Iexplore.exe, which will do the same thing.
| > >
| > > --
| > > Derek Melber
| > > BrainCore.Net
| > > derekm@braincore.net
| > > "Dan" <Nospam@hotmail.com> wrote in message
| > > news:uqghaA7BEHA.596@TK2MSFTNGP12.phx.gbl...
| > > > Can i use a GPO to have a machine login automatically with a certain
| > user
| > > > and password. Also Can i disable IE with a GPO so users cant browse
| the
| > > web.
| > > >
| > > > thanks
| > > >
| > > >
| > >
| > >
| >
| >
|
|
|



Relevant Pages

  • Re: Restricted Groups Not Working
    ... If the template is the issue, you can edit it and it will contain the GUID of the GPO from which it came so you can fix manually in the sysvol or via gpedit. ... I'm trying through Group policy to add a Security Group which I have created called Notts-xpadmins to the local administrators group on my xp workstations. ... Administrative privileged user logged on. ...
    (microsoft.public.windows.group_policy)
  • Re: security template file import
    ... gpttmpl.inf in the secedit folder of the GPO file system folder ... > in here is a single file - GPTTMPL.INF that lists the securtiy settings ... > as i can see is a copy of an imported security settings file) - is this ... >> template outside of the GPO which you edit to contain all the security ...
    (microsoft.public.win2000.security)
  • Re: updating free/busy information at the server level
    ... You can do this via GPO and the Outlook .adm template. ... >>> modify the free/busy information on the server level. ...
    (microsoft.public.exchange.admin)
  • Re: Restricted Groups Not Working
    ... template is the issue, you can edit it and it will contain the GUID of the ... GPO from which it came so you can fix manually in the sysvol or via gpedit. ... > group to the local administrators group I do not want to add domain users ... > Administrative privileged user logged on. ...
    (microsoft.public.windows.group_policy)

Loading