Re: Blocking a group of users from logging onto a wkstn.
From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 04/06/04
- Previous message: Ola: "Re: Active Directory Running but no Domain Controllers!!!"
- In reply to: Herb Martin: "Re: Blocking a group of users from logging onto a wkstn."
- Next in thread: Herb Martin: "Re: Blocking a group of users from logging onto a wkstn."
- Reply: Herb Martin: "Re: Blocking a group of users from logging onto a wkstn."
- Reply: Glenn C: "Re: Blocking a group of users from logging onto a wkstn."
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 6 Apr 2004 17:14:01 -0400
Herb,
You just lead me to the thought that I should have initially had.
You are correct - the method that I suggested is very tedious and very ugly.
I was just sorta thinking outloud.
Anyway, you could use Restricted Groups via GPO or you could manually do it
as you suggested...
Looks like I need to eat something so that my brainpower goes up!
Cary
"Herb Martin" <news@LearnQuick.com> wrote in message
news:eN$%23XrBHEHA.2612@TK2MSFTNGP09.phx.gbl...
> > Off of the top of my head I am thinking that you might want to limit the
> > computers on which this group of students can logon. There is a tab in
> each
> > user account object's properties ( logon to... ) where you can enter, by
> > default, eight computer accounts ( IIRC ). These students would then be
> > limited to logging on to these specific systems.
>
> This works but is extremely tedious and even ugly. (BTW, I
> thought it was up to 10 but who cares.)
>
> My method would be to remove "domain users" from the Users
> group of these machines and create another Group "ApprovedUsers"
> or "NonStudents" to put back into there.
>
> This should only allow those from the correct group(s) to logon.
>
> --
> Herb Martin
> "Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
> news:#$CHWhBHEHA.3068@TK2MSFTNGP11.phx.gbl...
> > Glenn,
> >
> >
> > Does this work for you? If not let me know and I will *think* of
another
> > approach.
> >
> > Just to make sure - they are logging onto the domain, not the local
> > computers, correct? And you do not want to limit all 650 of your
> students,
> > just this one group of xxx number of students.
> >
> > What exactly are you trying to accomplish ( smells like denying this
group
> > of students from logging on to these specific computers might not be the
> > root of the issue..... )?
> >
> > HTH,
> >
> > Cary
> >
> >
> > "Glenn C." <anonymous@discussions.microsoft.com> wrote in message
> > news:A5234BA5-19F7-4963-A76C-697D88772ABF@microsoft.com...
> > > I have 650 workstations all running win xp pro in a 2000 server
> > environment.
> > > I have a group of students I want to block from logging onto certain
> > machines in the network.
> > > Can this be done? I have looked through GPOs and tried a few things
on
> > the local workstations but I cant seem to get this to work.... any
> > suggestions?
> > >
> >
> >
>
>
- Previous message: Ola: "Re: Active Directory Running but no Domain Controllers!!!"
- In reply to: Herb Martin: "Re: Blocking a group of users from logging onto a wkstn."
- Next in thread: Herb Martin: "Re: Blocking a group of users from logging onto a wkstn."
- Reply: Herb Martin: "Re: Blocking a group of users from logging onto a wkstn."
- Reply: Glenn C: "Re: Blocking a group of users from logging onto a wkstn."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|