I need to improve our account management (using Active Directory) for a customer support site with 50+ computers.

The default "AD"-way is to give each user their own account. This adds up with a lot of administration with adding/disabling/enabling user accounts.

To avoid this supervisors have started to use shared "general" accounts like domain\callcenter2 etc and I don't like the idea of everyone knowing and sharing accounts and passwords.

Our ideal solution would be to create a group with computers which requires no login by the user. I.e. the users just have to start the computer.

• Should I configure auto-logon with a single user account like domain\agentAccount?
• Is there anything else to consider if I use the same account for all users?
• How do I configure the actual auto-logon with a GPO on the group? Is there a "Microsoft way" without 3rd party plugins?

Or is there a better solution?