Re: Disabling Domain Logon from Remote Domain
Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance
configure through a GPO the user right "Allow local logon"... remove
authenticated users and replace that with domain users from the child domain
--
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto #
BLOG -->
http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
"Vicky" <Vicky@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:95A2B81F-6B88-4549-8808-6A6F1F5719E9@xxxxxxxxxxxxxxxx
> Hi,
>
> In a windows 2003 or 2000 forest with multiple domain , is there a way to
> disable/ stop domain logons for example,
>
> I would want users in parent domain to be UNABLE to logon to the parent
> domain from a system that is a member of the child domain and vice a
> versa.
>
> I do not want to achive this by editing the users properties and
> explicitly
> specifying which system he can use to logon. The user should be able to
> logon
> on to his home domain from any member machine in his home domain.
>
> Is there any way this can be done.
>
> Vicky
>
.
Relevant Pages
- Re: Detecting user logon logoff
... Infact I am getting 680 but that is not against my member machine and user ... In DC event log i am not getting any event 680 against the user i used ... The interactive logon should occur first. ... I used a windows XP based machine to logon to domain controller using ...
(microsoft.public.platformsdk.security) - Re: Remove a domain from domain drop down list.
... I've got contoso.local as the forest root, marketing.contoso.local as a child domain and payroll.contoso.local as another child domain. ... I want to hide the forest root domain so that users in the child domains can't see them in the domains drop-down list when they do a ctrl-alt-del. ... them all to logon with a friendly e-mail style UPN suffixed logon that hides the domain names and structure completely from them. ... Because users are idiots and they will attempt to logon with their email address rather than their domain address. ...
(microsoft.public.windows.server.active_directory) - Re: Remove a domain from domain drop down list.
... I've got contoso.local as the forest root, marketing.contoso.local as a child domain and payroll.contoso.local as another child domain. ... I want to hide the forest root domain so that users in the child domains can't see them in the domains drop-down list when they do a ctrl-alt-del. ... them all to logon with a friendly e-mail style UPN suffixed logon that hides the domain names and structure completely from them. ... Because users are idiots and they will attempt to logon with their email address rather than their domain address. ...
(microsoft.public.windows.server.active_directory) - Strange Logon Problem
... I am having troubles getting Windows XP computers to access resources ... authenticates to a parent domain and the logon script attempts to map ... a drive to the share in the child domain. ...
(microsoft.public.win2000.active_directory) - Re: Remove a domain from domain drop down list.
... I've got contoso.local as the forest root, marketing.contoso.local as a child domain and payroll.contoso.local as another child domain. ... I want to hide the forest root domain so that users in the child domains can't see them in the domains drop-down list when they do a ctrl-alt-del. ... all to logon with a friendly e-mail style UPN suffixed logon that hides the domain names and structure completely from them. ... Because users are idiots and they will attempt to logon with their email address rather than their domain address. ...
(microsoft.public.windows.server.active_directory) |
|
