Hello All. I am a security consultant for a company and I am trying to implement active directory to the users in the office. I have a question where once the user is set to join the AD basically he have 2 login ID, one is the local machine and the other is AD. Now my question is while in the office environment, I want all the user to login to their AD account and if they do not, they cannot use the Internet connection but only accessible in the LAN only. I want to know how and where should I configure this policy. The reason is being even if the user does not connect to AD, I would only want to cut his internet access but still allow him to work within the LAN so that this policy does not efffect his work performance. I hope anyone would enlighten me with a solution for this. Thank you.