Limit Users logging on Laptop

[Woody]

Can some one help with ideas on this.

Staff have a laptop, which we set up on the network ands also put on a local
user. The staff can log on to the local user when they are at home or away
from the network and use their normal network log on account when on the
network. We share the local users 'MY Documents' so that their network user
account can save files to it so they can work from home.

Is their anyway I can stop then from being able to logon the their network
account, when away from the network, I believe XP lets you log on 8-10 times
with the memory cache from the network,

Is it possible to stop them from logging on to the network account when at
home?

 

[Colin Nash [MVP]]

Can some one help with ideas on this.

Staff have a laptop, which we set up on the network ands also put on a
local user. The staff can log on to the local user when they are at home
or away from the network and use their normal network log on account when
on the network. We share the local users 'MY Documents' so that their
network user account can save files to it so they can work from home.

Is their anyway I can stop then from being able to logon the their network
account, when away from the network, I believe XP lets you log on 8-10
times with the memory cache from the network,

Is it possible to stop them from logging on to the network account when at
home?

Start --> Run --> SECPOL.MSC , go to Local Policies-> Security Options and
set the value for INTERACTIVE LOGON: Number of previous logons to cache (in
case domain controller is not available) to 0
Make sure there is no group policy object in your domain that modifies this
policy as it will override your local settings.

 

[Steven L Umbach]

Why would you not want them to logon to their domain account when not
connected to the domain?? The danger with a local account is that they can
logon to that when connected to the domain to bypass Group Policy settings
for user configuration, etc if that is a concern.

Steve

 

[Woody]

Can the setting below be done at domain level? If so will it work if they
are away from the network i.e. at home.?


Make sure there is no group policy object in your domain that modifies this
policy as it will override your local settings.