Startup script that disables local account while on school network
We run a laptop scheme for our students and are currently in our fourth year. The laptops run XP (2 years worth), Vista (1 year) and Win 7 (1 year). Each student with a laptop has a domain account (to use while in school) and a local account on the laptop (to use while at home). We locally manage our domain and AD. Our servers are running Server 2008.
Over the years we have repeatedly told the students to logon to the school domain while in school and NOT their local accounts. They say that the reason that they are on their local account is that they can't get to the homework they have done. But we have put a link to their local documents in the start menu when they are logged onto the domain.
I'm looking for a way to disable all local accounts (apart from the administrator account) when they turn on their laptops in school. Thus forcing them to logon to the domain. Then, when they turn off their laptops at the end of the day, another script will enable the accounts.
I hope that someone could help me with this and appreciate anyone that has read through to this point.