Re: Restricting few users only to logon to a PC in a Windows 2003

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi
You can still do what Brian said...
For example:
Define a Local security Group for the PC, then create a Domain Security Group, make the domain security group member of that local security group, use the policy to allow logon locally that Local Security group.
For local users you make them members of that Local Security group, for domain users make them mebers of that new Domain security Group.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Haroon Malik" <HaroonMalik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:572BDAC4-2847-40BC-928E-3CBB760A85BC@xxxxxxxxxxxxxxxx
Dear Brian,

I am talking about logging on to the domain on this PC and not locally.
--
Haroon Malik




"Brian Desmond [MVP]" wrote:

Haroon-

Check out the allow logon locally policy and deny logon locally policy
setings - you can use one or the other to control who can login to the
machine.

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"Haroon Malik" <HaroonMalik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:20106641-793D-49AC-A85E-7A4DA7E6B8C1@xxxxxxxxxxxxxxxx
> Dear All,
>
> I have a Windows XP Sp 2 machine in my Windows 2003 domain. I want to > let
> only selected users to be able to logon to this machine on the domain.
>
> How can i do it ? Please help
> -- > Haroon Malik
>
>




.

Relevant Pages

  • Assigning permission via groups
    ... to see that local security group listed in the "member of" window? ... On that member server when checking properties on that local security group ... my required permissions to get trickled down to the users via group ...
    (microsoft.public.windows.server.active_directory)
  • Re: second login prompt required
    ... create a Global Security group (or Global ... Security Groups) and place the user account objects in the correct group ... permissions to the Local Security Group. ... > You could always keep the server as a workgroup member and not join it to ...
    (microsoft.public.win2000.active_directory)
  • Security Groups between 2 W2K trees on 1 single frest
    ... >My W2K forest works on Native Mode. ... >but I Can't add any other domain security Group. ... you want another Global Security group ...
    (microsoft.public.win2000.security)
  • Re: adding user from one domain to another domain
    ... Assuming that you have a 2 direction trust, ... In the destination domain create a local security group and assign permissions to that security group. ...
    (microsoft.public.windows.server.active_directory)
  • Create LOCAL security group with description
    ... I found this syntax for editing an AD security group, ... should be totally different for a LOCAL security group? ...
    (microsoft.public.scripting.vbscript)