Urgent - Remove a local computer policy on computer shutdown
We have a laptop scheme where students have their own school laptops and have a local and domain login. We need to restrict the logon to the local account when the student are in school.
We have looked at changing proxy setting etc within the school but it is not just the internet we wish to stop them from accessing. We need to restrict their access to local account.
There is a group policy under computer policies to only allow certain accounts to login, this restricts the student from logging in locally (as we only allow administrators, domain admins and other group to login) but we need this policy to be removed on shutdown. This is because they take the laptop home from school and need to login locally. So the policy get applied within the school's domain but not when they turn their machine on at home (as there is no way for the machine to access the domain) so does not apply the restriction.
We have looked at a script to allow account access during certain times but we need to allow access during the holidays and this may not be manageable.
This has become an urgent issue that needs to be solved. Many thanks for any help or advice.