Re: How to restrict computer logon only assign user?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



You can specify a domain user, domain global group, or local users/group on
a domain computer. --- Steve


"Mesak" <Mesak@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DDA4D797-94F4-475E-89C9-90B2F8B41958@xxxxxxxxxxxxxxxx
>I want to assign only user in domain user. Can I use Logon locally policy?
>
> "Steven L Umbach" wrote:
>
>> You can configure the user rights for logon locally and deny logon
>> locally
>> to limit who can logon to a computer. I would be sure to include
>> administrators however and keep in mind that deny logon locally will
>> override logon locally user right. Try to avoid using deny user rights
>> and
>> keep in mind that administrators are also members of the users and
>> everyone
>> groups. Say you just want user Joe to logon to the computer. Then
>> configure
>> logon locally so that only Joe and administrators are included. Local
>> Security Policy can be started via secpol.msc and go to local
>> policies/user
>> rights to see user rights assignments. If you can not change a user right
>> or
>> the local setting is different from the effective setting [Windows 2000
>> only] then a domain level policy is overriding the Local Security
>> licy. --- Steve
>>
>>
>> "Mesak" <Mesak@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:437BBB33-DCEA-462E-98BE-B36F87041C6A@xxxxxxxxxxxxxxxx
>> >I need to protect computer from another user logon. Can I restrict
>> >computer
>> > for logon only assign user?
>>
>>
>>


.



Relevant Pages

  • User Rights Assignment
    ... In the User Rights Assignment subsection of the ... Administrative Tools/Local Security Policy, three ... others and the controls/settings within each of these is ... and a local profile I use ...
    (microsoft.public.windowsxp.security_admin)
  • Re: log on to a domain controller as a non-administrative user
    ... it's in the local security policy I think ... click User Rights. ... > To open Active Directory Users and Computers, click Start, ... > I've try this in the Default Domain Policy, Local Security ...
    (microsoft.public.win2000.security)
  • Re: security updates
    ... we need to check group policy to ensure ... Step 1: Check User Rights Assignment ... Logging on system as administrator account. ... If you found although you have checked the box for "Local Policy Settings", ...
    (microsoft.public.win2000.general)
  • Re: Funny problem - Safety Strategy
    ... If it is a domain computer, you can move it into an OU that has user rights ... assignments configured to override the local policy. ... Policy on it to run as a startup script by using mmc/Group Policy - another computer ...
    (microsoft.public.win2000.security)
  • Re: Restrict computers user in an OU or Group can log on to
    ... If you don't want to overwrite local policy for user rights look into using the ... With over 1500 computers I don't feel like ...
    (microsoft.public.win2000.security)