Re: Group Policy Lofon Script

From what I can tell, the local computer is also a 'domain' sort of speak.
Normally, when you initially install Vista (business edition), you give the
computer a name. When you connect the computer to a corporate network, the
company's domain comes into play. Now there are two 'domains,' the computer's
name and the company domain.

What I'm finding is that when a user types in her username, without the
@domain, the computer's name appears below the username/password boxes. Does
this not log the user into the local computer? This is what we're trying to
avoid. Basically, if the user does not log in, using the
'username@domainname' as her username, we want the user to be unable to use
the computer.

"Costas" wrote:

No this isn't what I said. If a user type: "Administrator" Vista will
default to the local computer administrator account. For someone to log on
using the domain Administrator account, they will have to type:
"Domain\Administrator".

For any other domain account, the first type they have to type
'Domain\AccountName', and from that point on , every time they want to log
on , they don't have to type the domain name. Just the 'Account Name' will
be enough (If you look just below the text boxes where the account name and
password are typed, the name of the domain will already be listed there

--
Costas


"RoninV" <RoninV@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3A91A891-CCAE-4DD9-99F8-9BC3075E3EA8@xxxxxxxxxxxxxxxx
'Domain' = the name of the company network
'Local' = the computer itself.

There is an Administrator account in Domain and an Administrator account
in
Local. Are you indicating that if the Local Administrator account is
renamed
something other than Administrator, no user will be able to log into Local
by
simply entering their username (without Domainname) and password? In fact,
since users are required to log into the Domain, using the
username@Domainname and password combination, if the user forgets to
include
the Domainname when signing on, that user should get a error/warning that
the
user input is incorrect.

"Costas" wrote:

If there is a local user account with the same name as the domain
account,
the computer will pick up the local account. For example, if you type
"Administrator", it will default to the local Administrator. But if you
type "Domain\user" the next time the user logs to the same workstation
then
the username should be there waiting for the password.

If they want to type a different user name, then the domain name should
be
below the input textboxes next to the label "Log on to:" so they type
just
the user name.

--
Costas


"RoninV" <RoninV@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3FE20FB0-968A-4DE2-A6FA-DD1539FF4F0D@xxxxxxxxxxxxxxxx
I'm going to plant this question here, since this thread seems to touch
on
Group Policy login/off issues.

Vista (business ed) in a corporate domain. I'm trying to limit user
access
to the local computer. Users have to enter 'domain\username' and
password
to
log into the network. I find that if a user enter his username (without
the
domain\) and password, the user logs into the local computer, in spite
of
the
fact that there is only the Adminstrator account setup on the local
computer.
Is it possible to stop users, who do not have administrator level
access,
from logging into the local computer?


.

Relevant Pages

  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... administrator account -- we should have no problems at least browsing to ... server. ... | authentication dialog box. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Serious Security & Administrative issue!!!!
    ... capability [including file encryption and a boatload of security policies] to be ... The concept of the built in administrator account is ... if that account is only available in safe mode then hackers can not use it ...
    (microsoft.public.security)
  • RE: [VulnWatch] Blank Administrator password in DELL XP Professional install
    ... default out of the box configuration for any Windows XP Pro, ... this can lead to security ... risks if the administrator disables the account. ... Null Password on Administrator account. ...
    (VulnWatch)
  • Re: Update Error Code 800B0100 P.P.S.
    ... Here is the Direct link for that download for Vista x86 systems ... Administrator account that has full admin rights that could address those Windows updates that are not able to install. ... If the happens to be the built-in Administrator account, then enable it and set a password for it and login with the Administrator account. ...
    (microsoft.public.windows.vista.general)
  • RE: more info on a hopefully unsuccessful compromise
    ... Retina will still work ... accounts, btw, it's the Administrator account, and it belongs). ... has NO PASSWORD, it succeeds, and incorrectly logs the password as valid. ...
    (Incidents)