[THIN] Re: MSTSC Lock Users

Note that the GPO setting for the command prompt can allow scripts to execute (it’s a suboption).  Also picked up this tidbit somewhere along the way:

 

How to Enable or Disable Client Logons in the Registry

 

Disable logons

 

X86:  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

X64:  HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon

 

Add a REG_SZ value called WinStationsDisabled and set the value to 1.

 

Enable logons

 

Change the WinStationsDisabled value to 0.

 

--------------------------------------------------------------

Eric Layman

National City Corporation

Common Services - Platform Engineering

eric.layman@nationalcity.com

Mail Locator 01-5212

Office 216.257.7147

 

 

---

From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Raffensberger, Stephen D
Sent: Friday, December 05, 2008 4:10 PM
To: thin@freelists.org
Subject: [THIN] Re: MSTSC Lock Users

 

Doug,

 

I’ve see this too. When someone sets the GPO you can no longer use the command line to disable logins.

Strangely, if you’re using Citrix the CMC can still disable them on a per server basis. I wish I knew what trick they use.

 

Steve Raffensberger

Sovereign Bank

1125 Berkshire Boulevard

Wyomissing, PA 19610

email: sraffens@sovereignbank.com

 

---

From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Doug Rooney
Sent: Friday, December 05, 2008 11:48 AM
To: thin@freelists.org
Subject: [THIN] MSTSC Lock Users

 

 

Greetings,

As of this morning the script ‘Change login /disable’ no longer works. Windows Terminal server Win2003.

Thank You

-Doug Rooney
Sonoma Tilemakers
IT Systems Administrator
7750 Bell Rd.
Windsor Ca, 95492
(707) 837-8177 X11
(707) 837-9472 FAX
it@sonomatilemakers.com

 

 

***

This message contains information which may be confidential and privileged. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received the message in error, please advise the sender by reply e-mail, and delete or destroy the message. Thank you.

------------------------------------------------------------------------------------------- ***National City made the following annotations ------------------------------------------------------------------------------------------- 

This communication is a confidential and proprietary business communication. It is intended solely for the use of the designated recipient(s). If this communication is received in error, please contact the sender and delete this communication. ===========================================================================================