Re: logon to workstations

From: Jesse (Jesse_at_discussions.microsoft.com)
Date: 01/23/05 

Date: Sat, 22 Jan 2005 19:17:01 -0800

Cary and Ryan,

I work for a large organization, and we have a training facility that has
around 150 computers. We are trying to using a single domain account to logon
to all of the workstations. The user account has been setup to only allow it
to logon to the training facility workstations through the Logon Workstations
option in the account tab in user properties.

We have hit a limit of 60 computers that can be added to that list, and are
wondering if there is a GPO or other way of editing that ammount.

Thanks,
 

"Cary Shultz [A.D. MVP]" wrote:

> I am not sure that there is any limit. AFAIK, I could go to each and every
> computer in a 1000 computer environment and log on to each and every
> computer. That is, unless there is a setting in my user account properties
> limiting me to logging on to certain computers or some GPO that denies logon
> locally.
>
> Now, let's look at the two possibilities that I mentioned. These two will
> limit a user to logging onto only those computer accounts specifically
> mentioned in his / her user account properties -OR- prevent a user from
> logging into those computer accounts that fall under the Scope of Management
> of the GPO that denies the logon on locally to a specific group ( of which
> the user account object in question would be a member ).
>
> I am not sure where the limit of 60 originates. About the only 'limit'
> where the number is '60' of which I have any knowledge is the tombstone time
> limit. Not really sure where Jesse is getting this number.
>
> Now, is this an answer to your question?
>
> Or, as Ryan suggests, are you asking about a way to prevent a user from
> logging into computerA and then logging into computerB ( while he / she is
> still logged onto Computer! ). Both the Network Share and CConnect would be
> the way to prevent this....bas per the MSKB Article that Ryan provided.
>
> --
> Cary W. Shultz
> Roanoke, VA 24014
> Microsoft Active Directory MVP
>
> http://www.activedirectory-win2000.com
> http://www.grouppolicy-win2000.com
>
>
>
> "Jesse" <Jesse@discussions.microsoft.com> wrote in message
> news:2112B3E2-42A8-4D90-B265-AC848F6622A0@microsoft.com...
> >
> >
> > "Marcus Osborn" wrote:
> >
> >> In domain user account settings account >> logon to >>
> >> is there a limit to number of workstation accounts you can allow a user
> >> account to logon to.
> >
> > I believe the limit is actually 60 computers. Does anyone know how to up
> > that amount?
>
>
>

Relevant Pages

  • Re: Problems with user accounts
    ... When I joined to the new domain I tried to logon ... and giving it a GPO that allowed local logons and placed the computer account ... the client account is a domain user account that all 20 users in the ...
    (microsoft.public.win2000.general)
  • Re: Problems with Domain Join for XPE FP2007
    ... If you logon to local account, are you able to get to domain resources using the same domain user account ... you can enable audit and logging on the server side and see why it is rejecting the client logon request. ... try to do a domain join, I'm getting various errors that prevent the ...
    (microsoft.public.windowsxp.embedded)
  • Re: Welcome Screen Gone
    ... Once you've setup automatic logon for your user account, ... with the Administrator account. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Auto Logon Problem
    ... passwords is by running the User Account applet in Control ... Back to your logon problem, have you tried setting up automatic ... Description of Windows XP and Windows Server 2003 System File ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: logon to workstations
    ... unless there is a setting in my user account properties ... limiting me to logging on to certain computers or some GPO that denies logon ... Or, as Ryan suggests, are you asking about a way to prevent a user from ...
    (microsoft.public.win2000.active_directory)
Loading