Re: Restrict logon access to specific PCs

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks Jason.
I tried your solution on test PC and it worked.

--
Chris Ciapala
System admin
RZE SA

Please do not reply to email address - its fake.
"JSilva" <JSilva@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:21ED2D80-1CFB-4FED-8733-06A72A182C55@xxxxxxxxxxxxxxxx
> There is a way to do this.
> You want to create a policy and apply it to the PC's.
>
> In the policy under computer configuration/windows settings/security
> settings/user rights assignment add the group of users you want to be able
> to
> login locally.
>
> Allow logon locally - your user group.
> Allow logon through Terminal Services
>
> After this, you need to define the deny logon locally.
> Check the check box to "define settings", then remove any entries that are
> present.
> That's right, you want to define the settings but have no entries.
>
> Deny logon locally - Define but no entries.
> Deny logon through Terminal Services - Define but no entries
>
> By doing this only the group of users you specify will be able to login to
> the workstation. Nobody else will be able to login to the workstation.
>
> Hope this helps
>
> Jason Silva
>
> "Chris" wrote:
>
>> Hi all,
>> I know there is possibility to restrict user so he is able to logon from
>> specific workstations only, but is there _any_ possiblity to reverse it?
>> I
>> mean - I'd like to restrict PC so only designated users can log in into
>> this
>> machine. The best option would be to somehow assign group of users to PC
>> so
>> only members of this group can logon there. Or maybe there is some other
>> possibility? I have number of very sensitive workstations and I need to
>> restrict user access there, but there is limited possibility to
>> physically
>> secure them.
>> Any input appreciated.
>>
>> --
>> Chris Ciapala
>> System admin
>> RZE SA
>>
>> Please do not reply to email address - its fake.
>>
>>
>>


.

Relevant Pages

  • RE: Restrict logon access to specific PCs
    ... Allow logon locally - your user group. ... you want to define the settings but have no entries. ... Nobody else will be able to login to the workstation. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Logon failures reported by RSOP
    ... of the computers in that OU? ... reapplication of Security Settings to carry Services or User Rights ... Browser, Server, Automatic Updates, and Secondary Logon (I don't have ...
    (microsoft.public.windows.group_policy)
  • Re: How to apply GPO to remote VPN computers
    ... and reinforced it with a domain GPO. ... NOW - note that your users CANNOT LOGON AT ALL TO THEIR ... WORKSTATIONS using their domain account alone if the VPN connection is ... settings are not changed. ...
    (microsoft.public.windows.group_policy)
  • Re: visual style of login screen
    ... This allows to copy the settings such as animation, colors, font smoothing, ... keyboard, mouse, screen saver, wallpaper to the logon desktop. ... Screen saver copies your current screen saver selection, ... How to change the Windows Logon screen saver in Windows XP ...
    (microsoft.public.windowsxp.customize)
  • Re: Can I do an unattended diconnect of logged on users
    ... When you enforce logon hours restrictions by using to Group Policy to ... navigating to Computer Configuration \ Windows Settings \ Security Settings ... when logon time expires, users whose logon times settings prevent logon at ... >I am trying backup a folder of user data files nightly> between 4AM and 6AM and some updates that require no one> using these data files. ...
    (microsoft.public.windows.server.general)