Force logon to domain???

Anyone know of a method to force users to
use thier domain logon details when logging in to
a win98 machine instead of just hitting the Cancel
button.
All the 98 machines are members of an NT 4.0 Domain
and all users have domain accounts but no local accounts.
..
What I need is to deny them access to the machine unless
they actually logon to the domain.

upgrading to win2k or XP is still a long way off.

While I'm not familiar with the intricacies involving domain accounts as opposed
to local user accounts, see www.dougknox.com/security for many suggestions
relating to locking down Win98. You probably already know that Win9x simply
can't be made as secure as NT-based systems unless it's in kiosk mode, which I
don't think will help you (though I may be wrong on that.) But the site I
recommend *does* have methods for requiring logon and preventing the use of the
Cancel trick.

--
Gary S. Terhune
MS MVP Shell/User

"Gulper" wrote in message
...
Anyone know of a method to force users to
use thier domain logon details when logging in to
a win98 machine instead of just hitting the Cancel
button.
All the 98 machines are members of an NT 4.0 Domain
and all users have domain accounts but no local accounts.
.
What I need is to deny them access to the machine unless
they actually logon to the domain.

upgrading to win2k or XP is still a long way off.

Win 98 cd \tools\reskit\netadmin\poledit and read the instructions to
install the Windows 98 Security services, not installed by default in
Windows98 & SE, as they are in later Windows versions, to restrict users
ability to change system settings and make Win98 as secure as it can be.

For just the subset that makes windows require a valid username and password
goto Doug Knox security page and read the centre of the page "Prevent
unauthorised users, or click this
http://www.dougknox.com/security/validated.htm Read the instructions before
beginning, it is possible to Lock windows if you dont set up at least one
user name FIRST

--
Adaware http://www.lavasoft.de
spybot http://security.kolla.de
AVG free antivirus http://www.grisoft.com
Etrust/vet/CA 12 Month free trial (till Feb 2005)
http://www.my-etrust.com/microsoft/
Etrust/Vet/CA.online Antivirus scan
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
Catalog of removal tools (1)
http://www.pandasoftware.com/download/utilities/
Catalog of removal tools (2)
http://www3.ca.com/securityadvisor/n...aspx?CID=40387
Blocking Unwanted Parasites with a Hosts file
http://mvps.org/winhelp2002/hosts.htm
links provided as a courtesy, read all instructions on the pages before use
Grateful thanks to the authors/webmasters
_
"Gulper" wrote in message
...
Anyone know of a method to force users to
use thier domain logon details when logging in to
a win98 machine instead of just hitting the Cancel
button.
All the 98 machines are members of an NT 4.0 Domain
and all users have domain accounts but no local accounts.
.
What I need is to deny them access to the machine unless
they actually logon to the domain.

upgrading to win2k or XP is still a long way off.

The "MustBeValidated" registry setting described on Doug Knox's web site
does exactly what you want - in fact, that's what it is intended for, to
force a logon through a domain. The side-effect of securing a non-networked
PC is something discovered almost by accident.

--
Richard G. Harper [MVP Shell/User]
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


"Gulper" wrote in message
...
Anyone know of a method to force users to
use thier domain logon details when logging in to
a win98 machine instead of just hitting the Cancel
button.
All the 98 machines are members of an NT 4.0 Domain
and all users have domain accounts but no local accounts.
.
What I need is to deny them access to the machine unless
they actually logon to the domain.

upgrading to win2k or XP is still a long way off.