Students Bypassing GPO

[Richie1972]

Students are now getting wise to the fact that if they unplug the lan cable just after they start to logon, GPO doesn't get applied and they get access to most of the local computer.
I believe there is a means of forcing the computer to logoff if it can't find a domain controller, but I can't find the setting for it in GPO.
Students have mandatory roaming profiles and I would rather not use a heavily restricted Default User account.
How do others on here prevent this (aside from chopping the little buggers hands off)?

Richie

[CyberNerd]

How do others on here prevent this (aside from chopping the little buggers hands off)?

Thin client. if they pull the wire the session gets disconnected.

[meastaugh1]

The approach RM have used is to disable RSOP logging to greatly reduce the windows of opportunity.

[Sirbendy]

Hah! We've been, done and beaten that..I'll see if I can find out how tomorrow...it'll mean asking NGfL though, but..I'll try..

[ICTNUT]

The solution to this is to set cahced logons to zero in your student GPO and there is also a setting to logoff users if the profile is unavailble or cannot load.

I have posted a full solution to this somewhere on the forum, i'll find it and post a link up here for you.

[beeswax]

The solution to this is to set cahced logons to zero in your student GPO and there is also a setting to logoff users if the profile is unavailble or cannot load.

I have posted a full solution to this somewhere on the forum, i'll find it and post a link up here for you.

just spent a fruitless 10 minutes searching for this myself. I know it's there, I've seen it.

[richard.thomas]

We use a script that logs the user off, and gives them a scary dialogue, if it can't find a particular network drive (which will not have been mapped because they're using default profile). I think the script we used is on here somewhere, we just edited it for our use.

[apeo]

Could you post or point to the script.

[plexer]

This thread http://www.edugeek.net/forums/showthread.php?t=5232 ???

Ben

[SpuffMonkey]

And super mandatory profiles...

[sahmeepee]

It'd be good if this thread and thread 5232 could be moved to the "Security" forum.. not much point doing this trick other than as an attempt to bypass restrictions imo.