Can you 'lock out' a workstation via ZENworks?

Question

Hi,
I was wondering if there was a way to 'lock out' a workstation via
ZENworks so users can no longer log into the workstation temporarily.
This is the scenario - when someone within our company orders a new
workstation, they will many times tell us that the workstation is being
replaced when in reality the old workstation it is replacing is never
taken off the network.
The problem? - we do not charge any new license fees for replacement
workstations PROVIDING the old workstation is disposed of (that way we
are able to transfer the licenses from the old to the new). If the old
workstation is still used, we are in violation of license fees.
Solution? - 'lock out' the old workstation so no one can use it any
longer unless they call our Helpdesk and it is 'unlocked' at which time
we remind them of the license charges.
I am not sure how this can be performed. We currently do something
similar with NEW XP PCs that have no local user accounts on them yet
(basically we enable login restrictions under the DLU policy - if the
workstation can't create a local user account for the user, they can't
log into the network or the PC). That solution would not work in this
case though since the local accounts would already be created on the PC.
We don't want to remove any software from the machine that will need to
be reinstalled in case the site does want to keep the machine on the
network after a new one is purchased. The solution should be designed to
easily enable the machine if the site does decide they want to keep the
machine on the network. Later on we would FDISK the PC for disposal.
Any help would be GREATLY appreciated as ALWAYS!
Steve

Answer 1

Perhaps a Workstation Associated app that just pushed an invalid value for the
GINA.DLL
Either Remote Regedit or another Force-Run app could restore this to a correct
value.
Needs testing to make sure you can fix what you break, but this would lead
everything intact.
Marcus Breiden wrote:
> On Mon, 23 May 2005 19:05:23 GMT, [email protected] wrote:
>
> > I am not sure how this can be performed. We currently do something
> > similar with NEW XP PCs that have no local user accounts on them yet
> > (basically we enable login restrictions under the DLU policy - if the
> > workstation can't create a local user account for the user, they can't
> > log into the network or the PC). That solution would not work in this
> > case though since the local accounts would already be created on the PC.
>
> hmmm.... I would create an application and associate it to the wks, make it
> force run..
>
> in that app remove / or change the Tree for the workstation manager... this
> will disable all policy management (also DLU)...
>
> in case your accounts are locally on that box you would have to do some
> more stuff to get around your problem...
> --
>
> Marcus Breiden
>
> Please change -- to - to mail me.
> The content of this mail is my private and personal opinion.
> http://www.edu-magic.net
Craig Wilson
CNE3, 4, 5 - MCSE - CCNA
NSC Sysop (http://support.novell.com/forums/)
Tech Writer - http://www.ithowto.com
(I Peter 4:10)