Re: Block users from logging onto certain machines

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/06/04 

Date: Tue, 06 Apr 2004 21:23:53 GMT

You can use the "deny logon locally" user right to prevent users/groups from logging
onto a computer. Just keep in mind that administrators are members of the
users/everyone group, so never use those groups in the deny settings. I would suggest
putting those students into a group. Then put the computers you want to keep them
from accessing into their own OU. Create a GPO for that OU and configure the "deny
logon locally" user right for that GPO to include the group that you created with
those students as members. --- Steve

"Glenn C" <anonymous@discussions.microsoft.com> wrote in message
news:C6BDA69D-FBE6-4BFB-9299-2C1572AEF560@microsoft.com...
> I have 650 workstations all running win xp pro in a 2000 server environment.
> I have a group of students I want to block from logging onto certain machines in
the network.
> Can this be done? I have looked through GPOs and tried a few things on the local
workstations but I cant seem to get this to work.... any suggestions?
>

Relevant Pages

  • Re: Some servvices on my edge box slow to reply
    ... I have a default deny ruleset for both incoming and outgoing packets. ... I'm only logging the interesting ones coming in, ... I've been concerned lately will all the attempts to hack ssh via weak ... my new box with a fresh install of OpenBSD 3.5. ...
    (comp.unix.bsd.openbsd.misc)
  • Re: Grant, Revoke, Deny
    ... Permissions are cumulative and DENY takes precedence. ... checked for sysadmin role members. ... GRANT SELECT ON YourTable TO Apps ...
    (microsoft.public.sqlserver.security)
  • Re: I need a permission GURU!
    ... > accounts, and that group is the only group you've denied ... Then use the Deny ACE ... >>I have modified the members of the users group. ... >>> resource, so when an Administrator hits it, the access ...
    (microsoft.public.windowsxp.security_admin)
  • Re: [fw-wiz] Pix 535 Logging
    ... Just deny everything external for smtp except for your mail servers and then ... configure logging for at least informational (off the top of my head I think ... correctly on the router). ...
    (Firewall-Wizards)
  • Re: I need a permission GURU!
    ... If the only members of the group are limited user ... Why not just create a new group, and stick the accounts ... Then use the Deny ACE ... >> resource, so when an Administrator hits it, the access ...
    (microsoft.public.windowsxp.security_admin)