+ Post New Thread
Results 1 to 14 of 14
Windows Thread, Log off if GP not processed/applied? in Technical; The little angels seem to have twigged that by pulling the network lead out during logon, they can interupt the ...
  1. #1
    philjones2000's Avatar
    Join Date
    Mar 2006
    Location
    Pool, Cornwall
    Posts
    137
    Thank Post
    52
    Thanked 8 Times in 4 Posts
    Rep Power
    21

    Log off if GP not processed/applied?

    The little angels seem to have twigged that by pulling the network lead out during logon, they can interupt the group policy being applied and hence circumvent my software restriction policies. Doh, I knew they were being quiet.

    The event log lists the interuption as:

    Windows cannot obtain the domain controller name for your computer network.
    (The specified domain either does not exist or could not be contacted. ).
    Group Policy processing aborted

    Is there a computer policy I can put in that will not allow logins unless group policy is implemented? Or any other ideas? (I'm not allowed to electrify the outside of the network cables)

    Thanks as always

    Phil

  2. #2

    Join Date
    Mar 2007
    Posts
    1,833
    Thank Post
    89
    Thanked 312 Times in 239 Posts
    Rep Power
    89

    Re: Log off if GP not processed/applied?

    i thought it only updated gp during log on and that existing policies would stay in place untill it had a gpupdate?

    i could well be wrong.

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,225
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461

    Re: Log off if GP not processed/applied?

    But if it was the first time the pupil logged on that machine, and logins are not cached it will download new settings each time you logged on and wont apply existing policies.

  4. #4

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,136
    Thank Post
    1,913
    Thanked 1,345 Times in 743 Posts
    Blog Entries
    3
    Rep Power
    396

    Re: Log off if GP not processed/applied?

    Yeah, we have had the little ruggers doing this trick - senior DT if caught doing it and letter home to mummy & daddy - so it doesn't seem to be happening much now. It doesn't help that this this trick is listed on some of the websites that list hacks and cracks for kids to use in schools, along with proxy redirection sites and all that malarkey.

    Now, if I could only catch the little hickdead that keeps unplugging the usb cable to the printer in the library...

  5. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,225
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461

    Re: Log off if GP not processed/applied?

    little gits aren’t they unplugging the USB cable, you should rig it up so they get an electric shock

  6. #6

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,136
    Thank Post
    1,913
    Thanked 1,345 Times in 743 Posts
    Blog Entries
    3
    Rep Power
    396

    Re: Log off if GP not processed/applied?

    Quote Originally Posted by FN-Greatermanchester
    little gits aren’t they unplugging the USB cable, you should rig it up so they get an electric shock
    Great idea but no, what I'm going to do is rig a rape alarm up inside so that when they open the panel to pull the usb cable out it pulls the pin out of the alarm and hopefully they wet themselves :twisted:

  7. #7

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,225
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461

    Re: Log off if GP not processed/applied?

    lol i like it.

  8. #8

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,136
    Thank Post
    1,913
    Thanked 1,345 Times in 743 Posts
    Blog Entries
    3
    Rep Power
    396

    Re: Log off if GP not processed/applied?

    Yeah, I can't wait to set it up on Monday before school starts. I'll get the caretaker on standby with his mop and bucket!

  9. #9
    Oops_my_bad's Avatar
    Join Date
    Jan 2007
    Location
    Man chest hair
    Posts
    1,738
    Thank Post
    438
    Thanked 53 Times in 50 Posts
    Rep Power
    30

    Re: Log off if GP not processed/applied?

    ISTR that if you set up a local computer policy to run a user logon script that logs you off (ie, local computer policy takes precedence as there is no network GP being processed, hence use local policy and run startup scripts)

  10. #10

    Join Date
    Feb 2007
    Location
    Norfolk
    Posts
    137
    Thank Post
    2
    Thanked 9 Times in 9 Posts
    Rep Power
    17

    Re: Log off if GP not processed/applied?

    I think somewhere in the GP there is an option to log users off if GP processing fails.

    Try Computer -> Admin Templates -> System -> User Profiles -> "Log user off if roaming profile fails"

    Craig

  11. #11

    SpuffMonkey's Avatar
    Join Date
    Jul 2005
    Posts
    2,257
    Thank Post
    55
    Thanked 283 Times in 189 Posts
    Rep Power
    135

    Re: Log off if GP not processed/applied?

    I think you need a super mandatory profile to make this work.

  12. #12
    philjones2000's Avatar
    Join Date
    Mar 2006
    Location
    Pool, Cornwall
    Posts
    137
    Thank Post
    52
    Thanked 8 Times in 4 Posts
    Rep Power
    21

    Re: Log off if GP not processed/applied?

    I have tried the local computer policy logon script but find that this applies to all users whether they are art of the domain or not...

  13. #13
    donutcat's Avatar
    Join Date
    Dec 2006
    Location
    Bedford
    Posts
    115
    Thank Post
    7
    Thanked 12 Times in 11 Posts
    Rep Power
    22

    Re: Log off if GP not processed/applied?

    The answer is either super mandatory profiles, or by setting the GP to log off when roaming profile fails. If you also set the GP to delete cached profiles there should be no way in which they can get on without heving the correct profile, mandatory or roaming the same.

    The microsoft documentation says that a super mandatory is just a matter of changing the profile folder to have the extension .MAN but I have not tried that yet as I cannot see how the computer would know if the user has not logged on before. Details of profile management can be found.
    http://searchwinit.techtarget.com/se...oupPolch08.pdf

    DC

  14. #14
    philjones2000's Avatar
    Join Date
    Mar 2006
    Location
    Pool, Cornwall
    Posts
    137
    Thank Post
    52
    Thanked 8 Times in 4 Posts
    Rep Power
    21

    Re: Log off if GP not processed/applied?

    Yep, that got them. Super mandatory profiles have saved my network sockets.

    Well most of them...

    Thanks

SHARE:
+ Post New Thread

Similar Threads

  1. GPO Not Being Applied
    By lovelldr in forum Windows
    Replies: 1
    Last Post: 18th July 2007, 08:16 AM
  2. GPO's not being applied
    By pooley in forum Windows
    Replies: 7
    Last Post: 9th November 2006, 10:52 AM
  3. Proxy Settings Not Applied
    By dezt in forum Wireless Networks
    Replies: 16
    Last Post: 3rd October 2006, 08:26 PM
  4. Some of GP not applied to one PC
    By Pear in forum Windows
    Replies: 8
    Last Post: 16th December 2005, 02:14 PM
  5. Whos applied Exchange SP2 ?
    By ChrisH in forum Windows
    Replies: 8
    Last Post: 11th November 2005, 12:21 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •