Re: Blocking a group of users from logging onto a wkstn.

From: Herb Martin (news_at_LearnQuick.com)
Date: 04/07/04 

Date: Tue, 6 Apr 2004 23:25:23 -0500



-- 
Herb Martin
"Glenn C" <anonymous@discussions.microsoft.com> wrote in message
news:1F385A0B-8CDA-4BE8-9B14-31A6E4CE8FAB@microsoft.com...
> Sorry I guess I should have been more detailed...
> I have 650 wkstns, 2500 users, these are all in a domain broken down by
each school (12). I want to block all students from logging onto a few
specific machines (admin) computers. The student GPO is globally the same
for all sites so this would affect all the sites if modified, the same with
the teacher GPO.
You can make additional GPOs if we can find an easy way
for you to accomplish the goal.
>So I was wondering if in active dirrectory users and computers I can
elimated say the authenticated users from specific machines in the
security tab and just add the teacher group?
No, "Authenticated Users" is an AUTOMATIC group like
Everyone, but essentially this idea is what Cary and I were
discussing for you but using Users membership on the
workstations and a group, either new and existing to
grant the right ONLY to them by adding them to "Users"
and removing the default "Domain Users" from it.
> Or if you can think of any way to accomplish this. I know the brain food I
have been eating has not helped me lately except my girth...
We can accomplish it -- by modifying the group memberships,
but it is tedious -- changing each machine so we are trying to
figure out a way to do it with GPOs using the Restricted
Group feature.

Relevant Pages

  • Re: DST Updates Deployed via Group Policy
    ... if they are just reg settings and nothing more then ... WAS able to select the group in the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... In KB914387 Microsoft gives you the registry keys that need to be changed ... saw that my EST reg entries were the same as my 2003 server and 2000 ... WAS able to select the group in the GPO editor so I assumed that it could ... things are working, that is, the machines are being healthy little ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... Aren't these "patches" for XP and 2003 just the same registry ... WAS able to select thegroupin the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
    (microsoft.public.windows.group_policy)
  • Re: Basic Sec Template Design
    ... defined in a GPO linked to the domain object to impact domain accounts ... allowed to impact machines then these impact the machine local ... Have you also reviewed the security guides? ...
    (microsoft.public.windows.server.security)
  • Re: DST Updates Deployed via Group Policy
    ... I did run the script locally on the testing machine ... WAS able to select the group in the GPO editor so I assumed that it could ... things are working, that is, the machines are being healthy little ... Windows 2000 Pro machines and 2 Windows 2000 Servers that require this ...
    (microsoft.public.windows.group_policy)