Pull NIC lead out / bypass gpo

[oxide54]

Hi,

 

the little darlings have started the "pull the network lead out after the split second after logging in" trick, to bypass the GPO's.

 

I thought i had set a GPO setting that stopped this from working?

 

any ideas

[p858snake]

There is. It is called something like "log off if profile isn't loaded".

 

If you search the forums you should find it.

 

 

-Posted Via iPod touch

[Ignatius]

There were some interesting ideas here. I'm sure that I've seen it discussed in other threads too. I'll keep looking in my "Subscribed threads" folder.

[DMcCoy]

I have wait for profile, profile with .man on the end (.man.v2 on vista/7).

 

The biggest help has been to enable the wait for profile option on *the local machine policy*. I did this on vista before I imaged to stop people getting logged in when the group policy hasn't loaded with our authentication setup (meaning no network drives were connected).

[SpuffMonkey]

Agreed - you have to make the settings on the local PC - as if the cable is pulled - the GPO doesn't get fully applied - we had a spate of this recently and had to put a fix in quickly - annoying!