Computing.Net > Forums > Networking > Domain authentication & Local accts

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Domain authentication & Local accts

Reply to Message Icon

Name: fuderyuu
Date: September 8, 2005 at 14:21:26 Pacific
OS: Windows Xp SP2
CPU/Ram: Pentium 4/512Mb
Comment:

The gyst of the problem:
I'm trying to get CERTAIN users who authenticate through a GPO that has loopback enabled to use a specified local account on all machines instead of creating a brand new account in the Documents & Settings (since they will all be treated the same, personalization of the accounts is not a necessity).

Background:
I am a systems administrator for a small department in a University. The university has a domain which authenticates all AD users via Kerberos as well. The university somehow also has all the student accounts linked to Kerberos but they are kept seperated from every other type of AD accounts because of FERPA regulations and to keep information of the students private.
We can allow students to login to our domain machines using their student accounts by enabling loopback processing in a GPO.

The problem:
Whenever a student (which we have over 30,000 of them) comes in to our lab and logs in to the machine, a brand new local account is created for them in the Documents and Settings folder. After a while, these folders start eating up quite a bit of space in the computers.

The solution I'm looking for:
Allow the students to authenticate using their accounts BUT have everyone who logs into these machines that is recognized as a student use a single specific account in the Documents and Settings folder so as to conserve space.

I understand it would be so easy to simply create a generic login account and hand it out to students but that would pose as a security risk as anyone can then be given this generic account and we only want registered students to be able to use our labs.

Thank you all ahead of time.



Sponsored Link
Ads by Google

Response Number 1
Name: Dirty_Sanchez
Date: September 8, 2005 at 15:58:59 Pacific
Reply:

I dont think you are going to be able to do that, using XP anyway. If someone knows how, I'd be interested in it as well as cleaning up old profiles in dox and settings is a pain. Only thing I can think of is a script to clean them up at timed intervals but, then there is the fragmenting that would occur.


0

Response Number 2
Name: josh (by jpag3074)
Date: September 10, 2005 at 06:24:43 Pacific
Reply:

If you are concerned about eating up disk space then get software that creates a image (of a fresh install of windows configured with drivers and your domain), then everytime the machine is rebooted (nightly) the next morning it is running off the image, if you have 30,000 users then you should have servers setup for network storage so there should be no need to save data locally anyways
I beleive one software title is called Deep Freeze
does that make sense or do i need to word it differently

yup!


0

Response Number 3
Name: fuderyuu
Date: September 14, 2005 at 11:53:05 Pacific
Reply:

Looks like DeepFreeze will be the way to go. This is a huge upset but at the same time a good way to expand on new possibilities. Its looking like Deepfreeze Enterprise edition will give me more tools than I really need and will be the way to go with this.

Thank you both for your suggestions.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


wireless networking @ col... Controlling bandwidth ove...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Networking Forum Home


Sponsored links

Ads by Google


Results for: Domain authentication & Local accts

Local Rights vis Domain Rights www.computing.net/answers/networking/local-rights-vis-domain-rights/9644.html

VPN Authentication www.computing.net/answers/networking/vpn-authentication/8141.html

wireless Domain authenticate www.computing.net/answers/networking/wireless-domain-authenticate/26600.html