Is this a GPO setting or not?

From: Charles (mentaldrowremovethis_at_gimail.af.mil)
Date: 08/20/04 

Date: Thu, 19 Aug 2004 21:39:07 -0700

I'm trying to duplicate a setting on a few of the
machines I manage that will prevent users from logging
into the machines unless I go through the Users and
Passwords Control Panel item or Local Groups and User MMC
snap-in and give them permission to logon to the
machine. They initially have to be input into the
machine this way with Admin access to the machine and
then bumped down to a lower permissions level. If their
profiles aren't manually added in this manner they get a
message like this. "Cannot copy C:\Documents and
Settings\Default User\Favorites\<insert url here> to
C:\DOcuments and Settings\<insert User Name
here>\Favorite\... etc" with a countdown time at the
bottom. At the time out they get another message that
basically tells them to contact the Network Admin because
their profile could not be created on the machine. I
don't have much authority over the User Domain accounts
so I can't add them to specific OU except at the Local
machine level but I have complete control over the
machines themselves. Is this something that can be done
via the GPO or Local Security Settings? Is there another
MMC snap-in that I can use to duplicate this setting?
This is the only way I've found so far to prevent users
from logging into certain machines. The previous Network
Admin can't remember what he did to activate this so I'm
pretty much on my own. Thanks in advance for any and all
help.

Charles

Relevant Pages

  • Re: RDP Sessions not "disconnecting"
    ... You can logon to the Console as Admin and Disconnect instead of logging off and this will leave Admin logged on to Synch Act and will leave 2 more Remote slots open. ... The other choice is to disconnect from a normal session as Admin instead of Logging off and when you connect again you will resume your session. ... server based apps - she also hits it from remote. ...
    (microsoft.public.windows.server.sbs)
  • Re: RDP Sessions not "disconnecting"
    ... You can logon to the Console as Admin and Disconnect instead of logging off and this will leave Admin logged on to Synch Act and will leave 2 more Remote slots open. ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator Loses Privileges
    ... Are you aware of any admin "inactivity" safeguards built into Windows ... You might want to increase the size of the event logs. ... Logging out and logging back in restores them. ... Windows Server 2000/2003 to automatically lock the admin after a certain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Doing small jobs as Administrator
    ... >restrictive set of access permissions. ... >actions such as changing directory permissions without logging out, ... configuring network connections and so on) are not available as Admin ... additional login sessions, each running on it's own desktop. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Copying folders
    ... Are you logging in as the workgroup user or domain user? ... everyone has a local profile on the copmuter with their desktop and ... admin and have no problem getting to other profiles on this computer. ...
    (microsoft.public.scripting.vbscript)