I have a request that the option to logon locally be hidden or disabled on
XP pro workstations (in a 2003 server domain). This way a user would only
see the logon to domain as an option. Is there a way to do this via GP, reg
hack or 3rd party utility?

If so how does one regain local login control in the event of a DC loss?

(also I dont mean to just set the default option button state with
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon)

Ken

I think the only way of really doing this is to set the option button to off
as mentioned, and educate users into using their UPN logon name.

If they don't have local accounts, the only option is the domain anyway
isn't it? Or are there trusts in place, and these users have other
accounts?

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net