CC4 - Admin overrule Logged in accounts

[rad]

Anyone with CC4 managed to set a policy or something to give them the rights to unlock a locked computer.

 

With CC3 you could unlock using CAD and then type your username and password and then it logs the PC off.

 

With CC4 you can't do this.

 

Edit - its coming out as an update, date TBC.....

[NeoPlosive]

My honest advice would be to remove both the GINA and LogonUI Banner and just use the Microsoft Standard XP GINA.

 

The GINA seems to be causing a lot more issues than it is worth and updates have been promised but they've not come or have been withdrawn by RM.

 

The only things you want to do is deliver regtweaks via GPOs or the reg policies to turn off displaylogonoptions at the login and disableras logons (can send you the stuff across if you want it).

 

The issue you will face is the displaying of the domain dropdown list but "because the login options are hidden - most users should login, but some will ultimately fiddle around by changing the selected dropdown option then compressing options again". As long as users are aware of which domain to login to it shouldn't be an issue.

 

Set up works fine in the primary I manage

Edited August 28, 2009 by NeoPlosive