Is there an easy way to determine if a user is truly logged on to the domain or if they are simply using an existing cache logon?
There is a little application called Kerbtray that is found in the Windows 2003 Resource kit. When you run Kerbtray it puts an easy identifiable icon in the notification area. If the icon is green the user is logged on. Its that simple. Jeremy demonstrates this tool in Chapter 7 of his book.
The GPanswers.com forum is closed now (thanks, spammers!)
But we encourage you to join us at LinkedIn in the “GPO Stuff” group.
Jeremy is regular there, and there is a reasonable system to prevent junk posts.
In all, we think it’s the right place to go for Group Policy-specific questions.
It’s a private group, but just JOIN it, and the owner should approve your request.
See you there !
-Jeremy Moskowitz, Group Policy MVP