How to force a PC to log in to the domain, how to make the domain computer have to log in to the dom

There are usually four ways to solve this problem, or to solve it flexibly.

1. Use a policy to prohibit local login. You can create an OU, then place the computer account that needs to be controlled in it, and then set a policy on this OU, directly specify in the computer security policy Prohibit local login. But there's a problem with that, let's imagine a scenario:

If the client applies this policy, it happens that the current computer network is unavailable, and once the system fails, then even the local administrator cannot log in, and the help desk will not have a headache?

2. Restrict local groups. Generally speaking, this is the best course of action. All local accounts can be manually deleted (the built-in account routine cannot be deleted); Then clean up the accounts in the local administrators group, and at least keep the built-in system administrators and domain admins; Finally, change the password of the local administrator account.

This way, the user does not have a local account and can only log in to the domain.

Of course, this method is not suitable for large-scale deployment, so you can restrict the accounts or groups that are allowed to log in locally by way of policies, and you can also restrict the accounts in the local groups (for more information about the restricted group policy, please refer to).

3. Modify the registry to log in automatically. For specific parameter modifications, please refer to the situation.

But remember to use the format of the username. This approach is only a superficial solution; 1) Hold down the shift key when logging in or logging out to use other accounts. 2) Anyone with access to a computer can log in, which is not secure.

So this method is not recommended.

4. Block the local options in the login dialog. Please refer to the registry settings for this method.

In fact, the login window is this msgina, if the client in the current domain is winxp (note, win2k is not allowed to customize msgina), then you can customize this dll, and then release this dll through the policy using the computer policy, so that the login interface can be more in line with the needs of the enterprise.

Log in to the system with a system administrator account, then click "Start Run", enter "Open Group Policy Window" in the "Run" dialog box that opens, and then "Computer Configuration Windows Settings Security Settings Local Policy User Rights Assignment", find the "Refuse Local Login" item in the right window and double-click it, click the "Add Users or Groups" button in the pop-up window to add those users, and finally click "OK" to save the settings. As a result, users who have been added to the user list will not be able to log in to the system.

Set up your local machine to call the shots, and take a look at the IP settings.

1. Control Panel - Management Tools - Configure Your Server Wizard.

2. Yes, but you need to enter the user and password of the domain account.

3. Set it according to your own company's situation.

The server should also be added to the domain, and the accounts in the domain control can be grouped.

Yes, it's OK to add a local administrator account, and you will have a choice to log in to "...The drop-down box selects the computer name of your computer is to log in to the machine, and the domain name is to log in to the domain, and now there is a question whether you have a local login account and password, if not, then you can empty the password of the local account if you just find a system installation version or PE to enter it, or add a local administrator account. Then when you log in, choose to log in to your computer name and enter your account password.

After joining the domain, if you want to log in to the local account, win7 is to log out and click to switch users, and enter the local account in the user name such as.

Administrator Then is the login password, the XP system is to enter the account and password of the machine when logging in to the interface, and select the machine in item 3.

To sum up, if you want to return to the domain account, you only need to enter the domain account when you log in.

The question is not clear, don't know what you are asking. I didn't understand, he asked something.

I use a virtual network, but I forgot how to use it. Ask for yourself.

--- the first phase ---

First of all, preparation:

2.If all computers are consistent, you can ignore this line and the following**: If not, follow the following diagram.

3.Restart the modified computer.

--Phase 2 ---

Create a homegroup under Win7 and write down the password. As shown below:

1.Open the control panel and click the red label as shown below

On the computer that needs to log in to the machine, you will be prompted to enter the password of the group to join after the operation is completed in the second step.

- Phase 3 ———

On the main computer, you need to do the following settings on the computer that someone else logs into:

Once all the settings are complete, you can ensure that the computer in which the homegroup password is entered is logged in to the machine.

1.Stop the guest user first.,Needless to say, it's very simple.。

2.Right-click on My Computer-Admin-Local Users and Groups-Groups-Users-Delete the domain user, that is"Domain users"Delete, check other groups at the same time, and delete any unwanted users.

3.Right-click on My Computer - Management - Local Users and Groups - Groups - Administrators - Add Domain Users to Log In. Finish.

My Computer--Right-click Properties--Management--Local Users and Groups--Users--Right-click to add a new user;

Then set the password for the administrator login user.

on the account attribute of "AD Users and Computers"."Accounts"There's one on the label"Log in to (t)."can be specified.

You need to add a username to the directory management in Windows 2000 or Windows 2003, which is not a folder.

The account password in the control panel is set to a specific user and password.

Turn off guest mode. It's easy.

It can be solved by setting up a small virtual LAN, using a firewall, or using a Windows messenger service.

1) You can treat all users on the whole computer as a whole, establish a small virtual local area network, and restrict the computers with specific IPs to be connected, and the computers that cannot be connected will of course not be able to log in.

2) The solution is the same as that of (1) and is to use a firewall for connection management. Only computers with specific IP addresses can be accessed to prevent other computers from logging in remotely. However, it is recommended to use a hardware firewall, which may lead to a system crash or even compromise in the event of a DDoS attack (traffic attack).

3) The Windows Messenger service is only available when a computer tries to log in remotely, and can be set to "prompt the administrator when the 'remote user login' rule is triggered". However, this method can only be used to alert the administrator account when a computer triggers the rule, and the administrator account must ** to receive the information, and the user must be manually logged out by the administrator to terminate the connection, and if you want to actively restrict, you must establish a small virtual area network.

It is not possible for two computer names to exist at the same time within a domain.

Just set it up on AD:

1. Open the user and computer on the AD.

2. User Properties - Account - This user can log in to: Select the following computer.

Add the computers that are allowed to log in to the list.

It is not possible to have two computers with the same name in the same domain. The second one is untakable.

Other than that. You say swap computer names. This administrator doesn't need to give permissions.。。 Ordinary domain accounts cannot modify the computer name...

You can't get into the local administrator account without the administrator password, so it's okay not to tell him.

I changed the password for the computer administrator, and only told him the username and password of the domain user.

1.Click on "Start > Run" and enter "Open Active Directory Users and Computers".

2.Right-click on the user you want to set up >Properties" >Accounts" > log in to > following computers.

3.Add the specified computer. 4 Go to the domain user computer with the administrator, run Security Settings User Rights Assignment Login on Local Add Group Add users group to add the users group.

1.Right-click on My Computer-Administration-Local Users & Groups-Users, double-click Guest, select "Account Disabled" and OK to disable the Guest user.

2.Click on the group, double-click on the "users" item, and put the user"Domain users"Delete, click OK.

3.Double-click administrators to add the domain users you want to log in.

AD domain control - > the user's attributes--- account--- login to the --- default is all computers, you can choose to log in to the specified computer.