Domain login being bypassed?

[Tony414]

Hello,
I'm not sure if I'm posting this in the correct forum. There are some users that have been using username@domain with a password to log into my domain. This doesn't seem to be working correctly because the section where you can specify a domain is wrong and it logs them in and doesn't process their login script. Is there a way I can lock down how they log in so they can't bypass the "log on to:" section? These are XP machines.

Thanks,
Tony

[jeff_longley]

Can you clarify that a little further?

Because if your domain is ABC.com, you could log in as user1, with your password, and select ABC from the domain drop down, or as user1@ABC.com - they're the same thing. If the domain is wrong, when using the user1@abc.com they shouldn't be able to log in.

Do you have local accounts on the machine that a user could be logging into?