+ Post New Thread
Page 5 of 6 FirstFirst 123456 LastLast
Results 61 to 75 of 86
Windows Thread, Deterring Kids From Unplugging Network Cables in Technical; Originally Posted by farquea sounds handy, know anymore about it as sounds like it would do what i need and ...
  1. #61

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,686
    Thank Post
    333
    Thanked 513 Times in 481 Posts
    Rep Power
    178
    Quote Originally Posted by farquea View Post
    sounds handy, know anymore about it as sounds like it would do what i need and cut out the need to constantly ping a host?
    Ah just realised, because i am locking and not logging them off, this is why they can unlock and get back on. I dont imagine there is a way of not allowing a user to unlock unless it detects a DC
    Believe it's under:

    Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

    "Interactive logon: Require Domain Controller authentication to unlock"

    Logon information must be provided to unlock a locked computer. For domain accounts, this security setting determines whether a domain controller must be contacted to unlock a computer. If this setting is disabled, a user can unlock the computer using cached credentials. If this setting is enabled, a domain controller must authenticate the domain account that is being used to unlock the computer.
    Short version, needs to talk to server to login :P

    "Only issue" that could arise if you haven't thought about it so far, is local logins etc. Not sure how that'll interrupt with it.


    *EDIT - Seems I was slow

    Steve

  2. #62

    Join Date
    Jun 2009
    Posts
    372
    Thank Post
    14
    Thanked 3 Times in 3 Posts
    Rep Power
    20
    cannot for the life of me get Interactive logon: Require Domain Controller authentication to unlock to work!! i tried at first applying it to student users OU, didnt work so then all users OU and didnt work. then realsing it is a computer setting i tried applying it to the curriculum workstations OU where there is another setting to clear previous names from the username box but yet when i enable this it just doesnt work. i Lock the workstation and it lets me unlock it and as usual throw an error that it cannot find the student desktop. no idea why it wont work.

    Is there anything else anyone knows about which may be overiding this??

  3. #63

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,686
    Thank Post
    333
    Thanked 513 Times in 481 Posts
    Rep Power
    178
    Quote Originally Posted by farquea View Post
    Is there anything else anyone knows about which may be overiding this??
    I'll bet 10 you got another interactive logon set :P

    Like Number of Cached Credentials above 1?

    Interactive logon: Number of previous logons to cache (in case domain controller is not available)
    <-

    Steve
    Last edited by Steve21; 5th April 2011 at 09:28 AM.

  4. #64
    p858snake's Avatar
    Join Date
    Dec 2008
    Location
    Queensland
    Posts
    1,490
    Thank Post
    37
    Thanked 175 Times in 151 Posts
    Blog Entries
    2
    Rep Power
    51
    Did you remember to push it out (gpupdate /force)?

  5. #65

    Join Date
    Jun 2009
    Posts
    372
    Thank Post
    14
    Thanked 3 Times in 3 Posts
    Rep Power
    20
    Quote Originally Posted by Steve21 View Post
    I'll bet 10 you got another interactive logon set :P

    Like Number of Cached Credentials above 1?

    <-

    Steve
    10 please!

    just looked through policies and cant find any other setting interactive logon settings and yeah gpupdated and rebooted many times just to check its applying but still doesnt work, grrr!

  6. #66

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,686
    Thank Post
    333
    Thanked 513 Times in 481 Posts
    Rep Power
    178
    Quote Originally Posted by farquea View Post
    10 please!

    just looked through policies and cant find any other setting interactive logon settings and yeah gpupdated and rebooted many times just to check its applying but still doesnt work, grrr!
    I... Err.... *runs*

    Tried running rsop.msc on the client, to check if its enabling ok?

    Stupid question, But have you set it to 0? or just "not set" Back to the Cached creds option

    Steve
    Last edited by Steve21; 5th April 2011 at 09:56 AM.

  7. #67

    Join Date
    Jun 2009
    Posts
    372
    Thank Post
    14
    Thanked 3 Times in 3 Posts
    Rep Power
    20
    look to have got it, had to enable the number of cached credentials setting and put it to 0.

  8. #68

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,686
    Thank Post
    333
    Thanked 513 Times in 481 Posts
    Rep Power
    178
    Quote Originally Posted by farquea View Post
    look to have got it, had to enable the number of cached credentials setting and put it to 0.
    Want my 10 back!!!

    Steve

  9. #69

    Join Date
    Jun 2009
    Posts
    372
    Thank Post
    14
    Thanked 3 Times in 3 Posts
    Rep Power
    20
    Quote Originally Posted by Steve21 View Post
    Want my 10 back!!!

    Steve
    you bet that i had it set not that i HAD to enable it. therefore i'll keep the 10 that i am sure is in the post.

    cheers.

  10. #70

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,686
    Thank Post
    333
    Thanked 513 Times in 481 Posts
    Rep Power
    178
    Quote Originally Posted by farquea View Post
    you bet that i had it set not that i HAD to enable it. therefore i'll keep the 10 that i am sure is in the post.

    cheers.
    Like Number of Cached Credentials above 1?
    "Default: 25" If you don't disable it, or enable and set 0 :P

    Need... Beer.... Money!!

    Anyway, at least its working now :P

    Steve

  11. #71
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,524
    Thank Post
    106
    Thanked 88 Times in 74 Posts
    Blog Entries
    46
    Rep Power
    40
    Quote Originally Posted by farquea View Post
    strComputer = "."

    Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\wmi")
    Set colMonitoredEvents = objWMIService.ExecNotificationQuery _
    ("Select * from MSNdis_StatusMediaDisconnect")
    Set WshShell = WScript.CreateObject("WScript.Shell")

    Do While True
    Set strLatestEvent = colMonitoredEvents.NextEvent
    WshShell.Run "rundll32 user32.dll,LockWorkStation"


    ''''''''''''''''''''''''''''''''''''''''''''''''

    Dim objWMIService, objProcess, colProcess
    Dim strComputer, strProcessKill
    strComputer = "."
    strProcessKill = "'iexplore.exe'"

    Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate}!\\" _
    & strComputer & "\root\cimv2")

    Set colProcess = objWMIService.ExecQuery _
    ("Select * from Win32_Process Where Name = " & strProcessKill )
    For Each objProcess in colProcess
    objProcess.Terminate()
    Next


    ''''''''''''''''''''''''''''''''''''''''''''''''

    Loop

    I'm using this script at the moment but just had a teacher complaining about kids turning the wireless switch off. Any clever clogs know how i could adapt the script to do the same when the wireless card being turned off??
    how do i apply this script?

    Our startup script is a batch file.
    in order to test it on one computer i tried to do
    if %computername:~0,8% == T13-FAST cscript \\server\netlogon\unplug.vbs

    but this just hangs startup.

  12. #72

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    25
    just a quick note to add...

    If you are using these scripts as startup scripts and have "Always Wait for Network at computer startup" enabled in GP, I think that the PCs may get stuck at the "Appying startup scripts" stage on boot!
    ...but might be wrong.

  13. #73

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,686
    Thank Post
    333
    Thanked 513 Times in 481 Posts
    Rep Power
    178
    Quote Originally Posted by browolf View Post
    how do i apply this script?

    Our startup script is a batch file.
    in order to test it on one computer i tried to do
    if %computername:~0,8% == T13-FAST cscript \\server\netlogon\unplug.vbs

    but this just hangs startup.
    What's hanging? The script/login?

    Tbh I've only tested these on an actual computer, bearing in mind you're trying to run a remote script, that if the computer disconnects from network it won't be able to run.

    95% sure you'd need to have it copied to the script folder on the computer, else on network dc the script will crash. (Then even on dc, it'll still be there)

    Might be worth trying.

    Steve

  14. #74

    Join Date
    Mar 2011
    Location
    Coventry
    Posts
    61
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    8
    If your trying to stop them from preventing policies to be applied can you not just lock the workstation down when the cable is unplugged and then when it is re-connected force a gpupdate?

    That should then apply the policies?

    If the machine has to reboot to apply the policies then so be it. They would soon learn that they shouldn't be disconnecting ethernet cables.

  15. #75

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123
    Quote Originally Posted by browolf View Post
    how do i apply this script?

    Our startup script is a batch file.
    in order to test it on one computer i tried to do
    if %computername:~0,8% == T13-FAST cscript \\server\netlogon\unplug.vbs

    but this just hangs startup.
    You've got several chunks of script in there - save this as unplug.vbs somewhere safe (eg in netlogon)
    Code:
    strComputer = "."
    
    Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\wmi")
    Set colMonitoredEvents = objWMIService.ExecNotificationQuery("Select * from MSNdis_StatusMediaDisconnect")
    
    Set WshShell = WScript.CreateObject("WScript.Shell")
    
    Do While True
      Set strLatestEvent = colMonitoredEvents.NextEvent
      WshShell.Run "rundll32 user32.dll,LockWorkStation"
    loop
    and then change your batch file to:
    Code:
    copy  \\server\netlogon\unplug.vbs %windir%
    if %computername:~0,8% == T13-FAST wscript %windir%\unplug.vbs
    using wscript means the process launches in the background; if you use cscript then the batch file hangs because it's waiting for the script to terminate (and it doesn't - there's a loop waiting for the cable to be unplugged)

  16. Thanks to srochford from:

    browolf (7th April 2011)

SHARE:
+ Post New Thread
Page 5 of 6 FirstFirst 123456 LastLast

Similar Threads

  1. students unplugging network cable
    By centurio in forum Network and Classroom Management
    Replies: 14
    Last Post: 3rd May 2011, 09:11 PM
  2. gpo application issues (kids removing network cables)
    By jjohnsoncantell in forum Windows
    Replies: 1
    Last Post: 2nd July 2010, 12:30 PM
  3. Replies: 6
    Last Post: 27th May 2010, 08:21 AM
  4. Network Cables .. who?
    By DanW in forum Recommended Suppliers
    Replies: 8
    Last Post: 9th February 2009, 08:40 PM
  5. terminating CAT5E network cables in network cabinets
    By broc in forum Network and Classroom Management
    Replies: 7
    Last Post: 10th July 2007, 11:54 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •