GPO to force a user to log onto domain and not local machine

[Guest]

On the windows login screen in the options button, you have the ability to
log on to the domain or the local machine. We want to force everyone to log
onto the domain and that to be the default option in the 'Log on to' field
through a group policy.

 

[Tony Liu]

It's better to ask clients to logon with UPN looks like an email address in
a domain so that the user don't need to think about where they should log
on. I don't know if GP has an option of that. Please tell me if it has.
Thanks

 

[Guest]

Hi,

Don't give users local user accounts and they won't be able to logon to the
local machine. Windows leaves the last option as the one showing so if the
last user logged onto the Domain than the Domain will show as the default.
The only time I have found this isn't the case is when an Admin logs on
locally or the machine is first added to the domain.

Cheers,
Lara

 

[Jerold Schulman]

On the windows login screen in the options button, you have the ability to
log on to the domain or the local machine. We want to force everyone to log
onto the domain and that to be the default option in the 'Log on to' field
through a group policy.

Don't give them local accounts.

See tip 3031 » How do I prevent a Windows NT 4.0 users from toggling the Domain box during log on?
in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com