GPO "security" bug ?

  • Thread starter Thread starter Jesper Nielsen
  • Start date Start date
J

Jesper Nielsen

Hi
I've tried implementing that users aren't allowed to lock the computers via
the GPO on a windows 2000 server (the clients are w2k). At first sight it
seems to work just fine, however I have found out that it is possible for
the users to prevent this GPO from working by unplugging the net connection
right after login+password verification.
Is there a solution to this "security" bug ?

Regards,
Jesper
 
Hi
I've tried implementing that users aren't allowed to lock the computers via
the GPO on a windows 2000 server (the clients are w2k). At first sight it
seems to work just fine, however I have found out that it is possible for
the users to prevent this GPO from working by unplugging the net connection
right after login+password verification.
Is there a solution to this "security" bug ?

Regards,
Jesper
Click to expand...
The only thing I can think of is to test for the network connection in the login
script, and if it is missing, shutdown.

if not exist %LOGONSERVER%\NETLOGON\*.* %LOGONSERVER%\NETLOGON\shutdown.exe /l
/r /t:01

See tip 3277 in the 'Tips & Tricks' at http://www.jsiinc.com for the list of
tools in the reskit supplement.

See tip 2974.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Hmm ok, Thx for the answer.

Regards,
Jesper

Jerold Schulman said:
The only thing I can think of is to test for the network connection in the login
script, and if it is missing, shutdown.

if not exist %LOGONSERVER%\NETLOGON\*.*
Click to expand...
%LOGONSERVER%\NETLOGON\shutdown.exe /l
 
Back
Top