Bypassing GPO by unplugging network after entering password...
So, I have a clever student who is on-side and constantly looking for ways to defeat security. Everything he has found so far has been reasonably easy to fix.
The latest is that if he logs in to the domain then immediately yanks the cable and then replaces it once he has the desktop then he ducks the GPO and scripts and gets the full start menu and access to RDS, C: drive etc.
He can now see the server desktop but does not know the password of course.
Any ideas how to beat this one? I've searched without much joy.