XP logon box on Domain

[Ghostie]

Ok, I need a little domain help please.

Client Computer: XP Pro SP2

Sally sales person goes to this commputer and logs in no problem its her desk.

Joe janitor goes to Sally's desk and tries to login nope he is not user on her computer, still no problem.

When Joe's name and password do not work the logon box now switches from "Logon to: This Computer" to "Logon to: DomainName" now we have a problem. Since Joe Janitor is part of the domain he can now get on Sally's computer by using his name and password to logon to the domain. Is there a way to stop XP from letting them do this? Can the logon box for XP on a domain be changed to only allow logon to that workstation?

Thanks

[Doc Symbiosis]

Perhaps have a try with dsmod, which you can download at microsoft.com. I don't know, if this worls for domain users.

Another way to go surely is through the grouppolicies, since you have active directory, allowing ( or denying ) just one domain user to logon to the machine.

What I wonder about is, why exactly do you join the computer to the domain, when you don't want domain users to logon to the computer?

Hope this helps a little