Re: Restrict user to only certain machines.
From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 12/22/04
- Previous message: Mark Renoden [MSFT]: "Re: IE Maintenance settings stopped working since XP SP2"
- In reply to: MittonE: "Restrict user to only certain machines."
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 22 Dec 2004 03:06:47 GMT
You can use the user rights for logon locally or deny logon locally to so
such. Add the users to a global group and create an OU where you place their
computers. For the domain or other OU's add their global group to the deny
logon locally user right for the Group Policies for those containers. For
their OU create a Group Policy Object and configure the deny logon locally
user right to be defined but not contain any users or groups. That should
allow them to only logon to computers in their OU. Be very careful with deny
user rights however as administrators are also members of everyone and user
groups. --- Steve
"MittonE" <eugenem@transcircuit.com(Do not Spam)> wrote in message
news:B93EEBA7-9F54-46A8-AD23-667D790837D3@microsoft.com...
> Hi
>
> I want to restrict some users so they can only log onto the pc's in their
> department.
> I know it can be done at each user's properties on the account tab but I
> was
> just wondering if it can be done as a group policy so can add the whole
> group
> at the same time.
>
> Thanks
>
- Previous message: Mark Renoden [MSFT]: "Re: IE Maintenance settings stopped working since XP SP2"
- In reply to: MittonE: "Restrict user to only certain machines."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
