Remove "This Computer" from Domain Login Drop-Down?

[Guest Eric Robinson]

Is there an easy way to force terminal server users to login only to the

domain? I don't want them to be able to click the domain drop-down and

select "This Computer." We are using Windows 2003 Standard R2.

 

--Eric

[Guest Daniel Petri]

Re: Remove "This Computer" from Domain Login Drop-Down?

 

Yes. Don't give them a local user. Without that how would they be able to

log on locally?

 

--

Daniel Petri

http://www.petri.co.il

 

 

 

"Eric Robinson" <eric{nospam}@pmcipa.com> wrote in message

news:WfGWj.14$DX4.0@newsfe02.lga...

> Is there an easy way to force terminal server users to login only to the

> domain? I don't want them to be able to click the domain drop-down and

> select "This Computer." We are using Windows 2003 Standard R2.

>

> --Eric

>

[Guest Eric Robinson]

Re: Remove "This Computer" from Domain Login Drop-Down?

 

They can't log on locally. If they select "This Computer" the logon will

fail. However, for the sake of preventing confusion, I want to remove the

option. I don't want them to even SEE the "This Computer" selection. These

are ASP-hosted terminal servers. The more I can simplify things, the fewer

support calls we'll get. You know how that works.

 

 

"Daniel Petri <MVP>" <daniel@petri.co.il.removeme> wrote in message

news:%23epl7IftIHA.4260@TK2MSFTNGP05.phx.gbl...

> Yes. Don't give them a local user. Without that how would they be able to

> log on locally?

>

> --

> Daniel Petri

> http://www.petri.co.il

>

>

>

> "Eric Robinson" <eric{nospam}@pmcipa.com> wrote in message

> news:WfGWj.14$DX4.0@newsfe02.lga...

>> Is there an easy way to force terminal server users to login only to the

>> domain? I don't want them to be able to click the domain drop-down and

>> select "This Computer." We are using Windows 2003 Standard R2.

>>

>> --Eric

>>

>

>

[Guest Vera Noest [MVP]]

Re: Remove "This Computer" from Domain Login Drop-Down?

 

I don't think that this is possible.

And be thankful for that, because you would not be able to logon

either when the connection to the domain is down.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

*----------- Please reply in newsgroup -------------*

 

"Eric Robinson" <eric{nospam}@pmcipa.com> wrote on 14 maj 2008:

> They can't log on locally. If they select "This Computer" the

> logon will fail. However, for the sake of preventing confusion,

> I want to remove the option. I don't want them to even SEE the

> "This Computer" selection. These are ASP-hosted terminal

> servers. The more I can simplify things, the fewer support calls

> we'll get. You know how that works.

>

>

> "Daniel Petri <MVP>" <daniel@petri.co.il.removeme> wrote in

> message news:%23epl7IftIHA.4260@TK2MSFTNGP05.phx.gbl...

>> Yes. Don't give them a local user. Without that how would they

>> be able to log on locally?

>>

>> --

>> Daniel Petri

>> http://www.petri.co.il

>>

>>

>>

>> "Eric Robinson" <eric{nospam}@pmcipa.com> wrote in message

>> news:WfGWj.14$DX4.0@newsfe02.lga...

>>> Is there an easy way to force terminal server users to login

>>> only to the domain? I don't want them to be able to click the

>>> domain drop-down and select "This Computer." We are using

>>> Windows 2003 Standard R2.

>>>

>>> --Eric

[Guest RemyMaza]

Re: Remove "This Computer" from Domain Login Drop-Down?

 

On May 14, 2:33 pm, "Eric Robinson" <eric{nosp...@pmcipa.com> wrote:

> Is there an easy way to force terminal server users to login only to the

> domain? I don't want them to be able to click the domain drop-down and

> select "This Computer." We are using Windows 2003 Standard R2.

>

> --Eric

 

I've been successful in doing this. I created a group to deny local

logons. Then I added that group to my Terminal Server GPO under

Computer Configuration, Windows Settings, Security Settings, Local

Policies/User Rights Assignment: Deny Log on Locally. The domain is

greyed out but only if the credentials are saved in the .rdp

connection. If I login w/o any credentials then I'm able to pick

local or not. Just add your users to this group and take back your

control.

 

Regards,

Matt