Disable account

[Lesley_tech]

Hey guys and girls..

 

I have just noticed something..

I had disabled a year 10's account for doing stuff he shouldn't be doing.

then just earlier i noticed him using the account again??

What has he done? Can anyone help?

[cookie_monster]

Can you give some more background on your setup?

 

What operating system are you using and where did you disable the account?

 

Is it possible that another member of staff enabled it again?

 

Cheers.

[maniac]

Was he actually using his account or a mates?? I know kids quite often 'trade' logins at many schools I've worked in, and there's not a lot you can do about that except a disipline route.

 

Mike.

[Lesley_tech]

Hi.. We are running xp. With ranger and no i dont think another member of staff would of because they have to inform me first and plus head master gets involved and stuff we cannot work out how

[Lesley_tech]

Was he actually using his account or a mates?? I know kids quite often 'trade' logins at many schools I've worked in, and there's not a lot you can do about that except a disipline route.

 

Mike.

 

he might of been , But i saw his username pop up on the list of logged on computers

[cookie_monster]

Ranger, so you're running windows then, is the account now enabled in Active Directory? as maniac says it would be worth finding out if they were logged on as another user account.

 

Do you have auditing enabled if not i'd suggest it so you can find out for sure.

[Lesley_tech]

i shall look but dont think they are hmm

[FN-GM]

He could have already been logged onto that machine after you disabled him

[Lesley_tech]

Nope, coz as i said recently above, The head teacher gets involved and the student has to go to him, bit like goin to prison or something so i dont think he would have been logged on, because if he was logged on i would of logged him off anyway

[tomscaper]

reset his password and then you know for certain he cant get on, you could then try his account yourself to see if you can log on even when disabled, other option reset his password then he has to get it changed each time he wants to use the pc.

[tech-man]

errrr, was it the same machine? would the login credentials have been cached on the computer?

[FN-GM]

errrr, was it the same machine? would the login credentials have been cached on the computer?

 

If there is a connection to the server it still should check for changes to the account.

 

He might have unplugged the network cable then logged on with a cached logon

[tomscaper]

isn't there a setting in group policy that will deny cached logons?

[FN-GM]

there is yes, but some people find them handy especially laptop users.

[tomscaper]

this could be set just for students.

[tech-man]

separate laptops and workstations in to diff ous?

[tomscaper]

there is yes, but some people find them handy especially laptop users.

 

How actually do you deny logging on locally? Can't seem to find it anywhere.

[Busybub]

How actually do you deny logging on locally? Can't seem to find it anywhere.

 

Computer config, windows settings, security settings, local policies, user rights assignment, deny logon locally

[FN-GM]

this could be set just for students.

 

 

It’s a computer policy and it can’t spate staff from students

[Lesley_tech]

Hm interesting thanks guys will have to look into this, God hes gonner be in such alot of trouble

[BaccyNet]

It’s a computer policy and it can’t spate staff from students

 

You can set permissions on the GPO so it only effects a certain group/user. The guys who installed our Citrix farm have done this for our Staff & Student groups.

[cookie_monster]

On our Citrix setup we have this but it's still only to filter user policies you can't have a different machine policy that applies depending on what user is logged on.