If a school utilizes "Ad Hoc" detection for student computers, students may be able to fast user switch to a separate local account to evade detection. The solution to this problem is to disable Fast User Switching.
Fast User Switching is not available for Windows XP machines connected to a domain. On Windows Vista and 7, you should should apply the following Group Policy Setting to disable "Fast user Switching"
- Open Group Policy Management Console
- Create a New GPO or edit an existing one
- Navigate to: Computer Configuration\Administrative Templates\System\Logon
- Enable the "Hide entry points for fast user switching" GPO and apply it to the appropriate machines within Active Directory