Re: How to reduce default 'time out' period at logon

From: Linda B (someone_at_microsoft.com)
Date: 02/08/05 

Date: Tue, 8 Feb 2005 10:11:12 -0800

Do the users need to be logged on as themselves? Seems to me, if the only
thing the users are supposed to be able to get to is a certain website, they
don't necessarily need to be logged on using their own user credentials --
can you set up a local, generic user that they can log on as? They should
still have access to the internet (although if you're logging on locally
they may have to provide their domain IDs), you can still make the
modifications to Group Policy, and those accounts won't be tied to any home
directory.

I only suggest this because I'm not aware of any way to suppress mapping
home drives on particular machines (you could disable it in user manager,
but that would disable the drives for *all* machines that they log on to, of
course). There may be a way to lock down security on those machines more
effectively in GP; I can do a little research to find out...

--LB

"D.P. Roberts" <dproberts@pbride.com> wrote in message
news:#aD7QXfDFHA.4052@TK2MSFTNGP15.phx.gbl...
> I've got a university lab of 50 XP pro clients that are members of a W2K3
AD
> domain. At various times, professors give exams in this lab and want users
> blocked from accessing anything but a certain website. I've successfully
> accomplished this using IPsec filtering via group policy, but there's
still
> one problem:
>
> The IPsec policy also blocks the server that hosts users' home
directories,
> which causes a delay of several minutes at logon. I assume this is
happening
> because the clients keep trying to map home directories before finally
> timing out. Is there a way to reduce this time interval - either by
lowering
> the default 'time out' period or by disabling the mapping of home
> directories?
>
> Thanks in advance for any assistance.
>
>

Relevant Pages

  • Re: How to reduce default time out period at logon
    ... > modifications to Group Policy, and those accounts won't be tied to any ... There may be a way to lock down security on those machines more ... >> accomplished this using IPsec filtering via group policy, ... >> the default 'time out' period or by disabling the mapping of home ...
    (microsoft.public.windowsxp.general)
  • XP SP2 Firewall woes
    ... have a group policy that is supposed to disable the XP SP2 firewall on our ... It seems to work for some machines but others still have the ... firewall setting turned on, eventhough the policy seems to have been applied ... Is there a bullet-proof way of disabling the firewall enterprise-wide? ...
    (microsoft.public.sms.admin)
  • Windows XP SP2 firewall woes
    ... I have a group policy that is supposed to disable the XP SP2 firewall on our ... It seems to work for some machines but others still have the ... Is there a bullet-proof way of disabling the firewall enterprise-wide? ...
    (microsoft.public.windows.server.networking)
  • Re: pci-disable-decode-of-io-memory-during-bar-sizing.patch
    ... The second problem is that on some machines, when we are doing BAR sizing on PCI devices, and write all ones to a BAR in order to determine how many bits "stick", the BAR ends up overlapping with the MCFG area. ... Usually on these machines the MMCONFIG is located near the top of 32-bit memory and the PCI device causing problems is a PCI Express graphics card. ... We do avoid disabling decode on host bridges, as it's known that some of them disable RAM access when you turn decode off, stupidly. ...
    (Linux-Kernel)
  • Re: Scanning for unsecure shared folders
    ... be of help in securing your machines and it can be used on remote machines. ... then your network will be more secure. ... and bypass any Group Policy user configuration and reconfigure the computer. ...
    (microsoft.public.win2000.security)