local users and groups in ad

[therealtalkinggoat]

is there a way to eliminate the local users and groups on CLIENT/WORKSTATION computers so they will only use active directory.

if i go to local users and groups in computer management on the server, there is no option to change them. there is a red "X" in this area because AD has taken over this task.

i wish to get the CLIENT machines (NOT THE SERVER) to do this. i want the CLIENT machines to run only off of AD. i seem to rember, at one time, there was a way to do this. i just can't rember how...

 

[surfk4t]

Dear Goaty

I think you can use a domain\local group policy to do something similar
Look for Deny Logon Locally on under gpedit.msc


Cheers

 

[snootalope]

Deny logon locally? It exsists, but I don't know about using it..

Why not use group policies to administer "local" settings.. I'd create a new OU and drop all the workstations in it and create a new group policy on it, blocking inheritance and customize it in the COMPUTER CONFIGURATION are of the policy.. everything you would need for local security can be done in the User rights assignment/security options in the group policy..

"tis better to remain silent and be thought of as a fool..
then open your mouth and remove all doubt" Mark Twain

"I should of been a doctor.." Me

 

[surfk4t]

Snootalope.

Thats a good way of doing it.