Re: Restricting User Logon with Group Policy
- From: kelmel <kelmel@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 31 Aug 2005 08:40:04 -0700
Thanks for the information!
"Dmitry Korolyov [MVP]" wrote:
> You need to modify the security privilege called "Log on locally". It can be
> found under Computer Configuration\Windows Settings\Security Settings\Local
> policies\user rights assignment.
>
> By default, a lot of accounts are granted this privilege, e.g.
> "Administrator", Power Users, Users and so on, depending on your current
> configuration. Basically, you need to modify it allowing only Administrators
> and your user account to log on locally, removing all other entries from the
> list. But you might need to keep some groups or accounts depending on your
> security model.
> Then just apply this GPO so it affects all computer accounts where only this
> user should be able to log in.
>
> --
> Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
> MVP: Windows Server - Directory Services
>
>
> "kelmel" <kelmel@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:442C6D63-D7CE-49D6-A2B0-8210311BACC4@xxxxxxxxxxxxxxxx
> > Hi,
> >
> > I have several computers that I need one user to log on to them and all
> > other users to be restricted. I am confused about which group policy
> > setting
> > would work the best. I have a 2003 domain and the workstations are XP.
> > Thanks!
>
>
>
.
- Prev by Date: RIS computers doesn't been created in the defined OU
- Next by Date: Windows Firewall problems and group policy
- Previous by thread: RIS computers doesn't been created in the defined OU
- Next by thread: Windows Firewall problems and group policy
- Index(es):
Relevant Pages
|
