Re: limit domain user login to specific group on 2 xp machines

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

By default, members of the local groups, Administrators, Backup Operators,
Power Users, Users and Guest (if its enabled) can logon locally. Perhaps
the users you don't want to be able to logon locally are members of another
of these groups besides Users.

You can control who can logon locally using the Group Policy settings in
Computer Configuration
Windows Settings
Security Settings
Local Policies
User Rights Assignment
Allow log on locally
and
Deny log on locally

Remember that "deny" supercedes "allow", so if a particular user gets both
Allow and Deny (e.g. by being members of several groups), they won't be able
to log on locally.

--
Bruce Sanderson MVP Printing
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.



"Patrick" <pat.montag@xxxxxxxxx> wrote in message
news:1126542642.999601.297590@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> All,
>
> I am trying to limit domain usage on a couple of computers in a
> computer "lab" setting. I would like to have a specific domain group
> (group x) login to two student machines in this lab setting. This group
> (other than admins) should be the only people to be able to do this.
>
> I have tried a fix I read about in another posting that had me deleting
> the "domain users account under the "users" group in "groups" from
> managing "local users and groups" in the "computer management" console,
> and replacing with the specific user(s) from the domain, it did not
> work, and I am not sure why (I even deleted all exisiting domain
> profiles).
>
> Any Ideas?
>
> Thanks in advance,
>
> -Patrick Montag
>


.

Relevant Pages

  • Re: SQL Domain Group Permissions
    ... Most settings can be retrieved by any authenticated user. ... the group "Domain Admins" is added to the local ... Administrators group with the computer is joined to the domain. ... members of Domain Admins to retrieve more information on the computers. ...
    (microsoft.public.sqlserver.security)
  • Re: External Trust functionality...
    ... Jorge, is this not yours? ... However can be members of Local ... Administrators Local group in the other forest you'll see that works. ... Local Groups is different... ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password settings for users change by themselves
    ... Justin, thank you for replying. ... Typically they are members of Domain Users, Domain Power Users, Mobile ... I guess I'm missing where the groups are assigned such settings as I ...
    (microsoft.public.windows.server.sbs)
  • Re: Question about Groups
    ... If the domain is in NT4 mode aka mixed mode the members will be able to see Global groups from any domain and local groups on the member servers themselves. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Group Recursion, Creation, and GP
    ... Rather than using scripts to populate local groups (e.g. Administrators) consider using ... administer them largely by Group Policy. ... the system never allows members of System Specialists to log in. ...
    (microsoft.public.windows.group_policy)