removing the log onto machine locally option

[UnlimCompSol]

Hi,

I wanted to know is there a way to remove the log onto machine locally option when you are on a domain. I am running windows 2003 server with AD and all work stations are windows 2000 prof.

Thanks

Malik

http://www.unlimitedcomputersolutions.com

where your problems are our solutions!!

 

[bcastner]

Use the Microsoft NTRIGHTS.EXE utility from either the Resource Kit or direct download:

. Discussion:

http://support.microsoft.com/kb/q266280/

. Direct download:

http://www.dynawell.com/reskit/microsoft/win2000/ntrights.zip

This only needs to be run once, but you could "push" the change through your logon script; you would need to add the line:
ntrights.exe -r SeInteractiveLogonRight -u "Users"