correct me if I am wrong, but on all my win2k pro boxes there are only 2 accounts that reside locally on the workstation. Unless you are adding accounts manually, there should only be two accounts locally on the workstation. One is "Administrator" and the other "Guest". The Guest acct is disabled by default I beleive. So if you don't give your users local admin rights to the workstations they won't be able to add themselves locally therefore will only be able to log on as domain users.
later dw >From: "Matt Andreko" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Subject: restrict local users totally >Date: Mon, 31 Dec 2001 15:10:28 -0500 > >I am trying to setup a test domain so that I can learn more about >active directory and such. > >I am beginning to get it going. On the domain controller, there won't >be any local users, because it's a domain controller. However, all the >workstations connecting to it can have local or domain users. > >Is there a way to disable local users on the workstations, to FORCE the >users to log on to the domain? > > >-- >Matt Andreko _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com
