How to disable logon to local computer after join a domain

[Guest]

Hi,
When Win XP Pro or Win 2K Pro has joined a domain, there are 2 entries in
the logon dialog box. First entry is local computer account and second one is
the name of domain. Is there any possibility to ONLY show domain name without
local computer? I want to prevent user to login to local computer without
domain authentication.
I appreciate someone to share this thought.

Thx

 

[Bruce Chambers]

Greetings --

If you don't want users to logon on locally, simply do not create
any local accounts for them to use.

Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Robert Moir]

Hi Bruce,
Thanks for your reply. What I meant is : In the Logon dialog box,
normally there are 3 fields (username, password and domain name).
The 3rd field is a combo box which allow the user to choose to login
to domain or login to local computer. What I need is I want to make
this combo box only contain domain name ONLY (without local computer).

I do this with a custom GINA that removes the domain/machine selector. There
are no doubt easier ways but it works for me.

However, as Bruce says, if you do not give them any local machine accounts
then they cannot log onto the local machine.

Rob
MS MVP

 

[Guest]

Thanks Rob, but I don't know anything about GINA. Could you please enlighten
me?

 

[Robert Moir]

Thanks Rob, but I don't know anything about GINA. Could you please
enlighten me?

Its covered at msdn.microsoft.com - search for ' custom GINA'