I need to improve our account management (using Active Directory) for a customer support site with 50+ computers.
The default "AD"-way is to give each user their own account. This adds up with a lot of administration with adding/disabling/enabling user accounts.
To avoid this supervisors have started to use shared "general" accounts like
domain\callcenter2 etc and I don't like the idea of everyone knowing and sharing accounts and passwords.
Our ideal solution would be to create a group with computers which requires no login by the user. I.e. the users just have to start the computer.
- Should I configure auto-logon with a single user account like
- Is there anything else to consider if I use the same account for all users?
- How do I configure the actual auto-logon with a GPO on the group? Is there a "Microsoft way" without 3rd party plugins?
Or is there a better solution?