Controlling XP logon

  • Thread starter Thread starter John Wood
  • Start date Start date
J

John Wood

I have XP in a window 2000 domain. I have set the 'Cached LogonCount' to 0
in other win2000 workstations, so that user cannot log onto the workstations
if the doamin controller is not available. Is there any way I can do in XP
to achieve the same thing ? I need the domain controller to perform some
user check, eg. 'allowed logon time' etc...
Thanks.
JW
 
The best way to go is to set a Group Policy on the
domain, and forget about changing the registry value on
each machine.

The group policy you want to set for the domain (or the
OU/computers you want it to apply for) is the following:

Computer Configuration->Windows Settings->Security
Settings->Local Policies->Security Options.
"Interactive Logon: Number of previous logons to cache"

and set it to 0 in the policy.

You can also set the "Interactive Logon: Require domain
controller authentication to unlock workstation" to
enabled in the policy if you want to force authentication
with the DC to unlock the computer as well.
 
Back
Top