Re: Group Policy Lofon Script

Ask the users to log in using the domain prefix (e.g. DOMAIN\USERNAME). After they do that, the next time they can use just USERNAME and they will be able to log in to the domain.

If you, as the administrator, try to log in to a computer using just the account 'Administrator', the log in will default to the computer name, instead of the SBS domain. That's because there are two accounts, one on the computer and one in the domain.

--
Costas


"RoninV" <RoninV@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:885CC120-85C2-4AA2-9A2D-F6932A5847EB@xxxxxxxxxxxxxxxx
From what I can tell, the local computer is also a 'domain' sort of speak.
Normally, when you initially install Vista (business edition), you give the
computer a name. When you connect the computer to a corporate network, the
company's domain comes into play. Now there are two 'domains,' the computer's
name and the company domain.

What I'm finding is that when a user types in her username, without the
@domain, the computer's name appears below the username/password boxes. Does
this not log the user into the local computer? This is what we're trying to
avoid. Basically, if the user does not log in, using the
'username@domainname' as her username, we want the user to be unable to use
the computer.

"Costas" wrote:

No this isn't what I said. If a user type: "Administrator" Vista will
default to the local computer administrator account. For someone to log on
using the domain Administrator account, they will have to type:
"Domain\Administrator".

For any other domain account, the first type they have to type
'Domain\AccountName', and from that point on , every time they want to log
on , they don't have to type the domain name. Just the 'Account Name' will
be enough (If you look just below the text boxes where the account name and
password are typed, the name of the domain will already be listed there

--
Costas


"RoninV" <RoninV@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3A91A891-CCAE-4DD9-99F8-9BC3075E3EA8@xxxxxxxxxxxxxxxx
> 'Domain' = the name of the company network
> 'Local' = the computer itself.
>
> There is an Administrator account in Domain and an Administrator > account
> in
> Local. Are you indicating that if the Local Administrator account is
> renamed
> something other than Administrator, no user will be able to log into > Local
> by
> simply entering their username (without Domainname) and password? In > fact,
> since users are required to log into the Domain, using the
> username@Domainname and password combination, if the user forgets to
> include
> the Domainname when signing on, that user should get a error/warning > that
> the
> user input is incorrect.
>
> "Costas" wrote:
>
>> If there is a local user account with the same name as the domain
>> account,
>> the computer will pick up the local account. For example, if you type
>> "Administrator", it will default to the local Administrator. But if >> you
>> type "Domain\user" the next time the user logs to the same workstation
>> then
>> the username should be there waiting for the password.
>>
>> If they want to type a different user name, then the domain name >> should
>> be
>> below the input textboxes next to the label "Log on to:" so they type
>> just
>> the user name.
>>
>> -- >> Costas
>>
>>
>> "RoninV" <RoninV@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:3FE20FB0-968A-4DE2-A6FA-DD1539FF4F0D@xxxxxxxxxxxxxxxx
>> > I'm going to plant this question here, since this thread seems to >> > touch
>> > on
>> > Group Policy login/off issues.
>> >
>> > Vista (business ed) in a corporate domain. I'm trying to limit user
>> > access
>> > to the local computer. Users have to enter 'domain\username' and
>> > password
>> > to
>> > log into the network. I find that if a user enter his username >> > (without
>> > the
>> > domain\) and password, the user logs into the local computer, in >> > spite
>> > of
>> > the
>> > fact that there is only the Adminstrator account setup on the local
>> > computer.
>> > Is it possible to stop users, who do not have administrator level
>> > access,
>> > from logging into the local computer?
>>


.

Relevant Pages

  • Re: USER PROFILE CORRUPT?? HELP!!!!!
    ... >Windows cannot log you on because your profile cannot be ... >that your network is functioning correctly. ... >problem persists, contact your network administrator. ... This is where the hidden account called ...
    (microsoft.public.windowsxp.general)
  • Re: Home network admin - can he browse my files?
    ... Network that I'll be connecting to in order to access the internet. ... the network administrator log on through the network to my laptop as ... account on the system have a complex password (Each of 4 character sets ... Can the network administrator log on ...
    (alt.computer.security)
  • Re: Windows XP Pro and Home Connectivity
    ... What's strange though is that when I log in under the new/secondary username, ... it's as if the network wizard has not been run. ... d) The Guest account on the Pro computer is disabled. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Cant logon to Windows
    ... The network, a desktop, laptop and 2 printers, seems to be working ... Administrator and User Group and disabling all of the accounts. ... "This account has been disabled. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Home network admin - can he browse my files?
    ... Network that I'll be connecting to in order to access the internet. ... the network administrator log on through the network to my laptop as ... Does every account on the system have a complex password? ... If the family member is extremely knowledgeable and willful enough, you will be hard pressed to prevent access to both the transmitted information as well as access to local system resources. ...
    (alt.computer.security)