Re: Restricting few users only to logon to a PC in a Windows 2003
- From: "Cary W. Shultz" <cshultz@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 8 Jun 2007 10:23:31 -0400
Haroon,
I would suggest that you listen to what young Mr. Desmond is saying.
Let's say you work for a media organization [know anyone who does that? ;-)]
and there are five people who keep on logging on to computers in a specific
department. Let's say that this is really annoying and not allowed.
Furthermore, let's say that these five people really do not care about what
anyone says because Daddy runs the company. So, you would create a security
group, make those five user account objects a member of the that security
group and then apply the "deny logon locally" to that group. Let's say that
all of the computers in that department are located in one OU...create the
GPO and link it to that OU. Reboot the computers. The next time that any
of these five guys try to logon to any of the computers in that Department
they will be informed that there is a policy in place that prohibits them
from logging on to this computer....
HTH,
Cary
"Haroon Malik" <HaroonMalik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:572BDAC4-2847-40BC-928E-3CBB760A85BC@xxxxxxxxxxxxxxxx
Dear Brian,
I am talking about logging on to the domain on this PC and not locally.
--
Haroon Malik
"Brian Desmond [MVP]" wrote:
Haroon-
Check out the allow logon locally policy and deny logon locally policy
setings - you can use one or the other to control who can login to the
machine.
--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services
www.briandesmond.com
"Haroon Malik" <HaroonMalik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:20106641-793D-49AC-A85E-7A4DA7E6B8C1@xxxxxxxxxxxxxxxx
Dear All,
I have a Windows XP Sp 2 machine in my Windows 2003 domain. I want to
let
only selected users to be able to logon to this machine on the domain.
How can i do it ? Please help
--
Haroon Malik
.
- References:
- Re: Restricting few users only to logon to a PC in a Windows 2003 doma
- From: Brian Desmond [MVP]
- Re: Restricting few users only to logon to a PC in a Windows 2003 doma
- Prev by Date: Re: Domain without global catalog server
- Next by Date: Re: finding the Domain controller where the user account get deleted
- Previous by thread: Re: Restricting few users only to logon to a PC in a Windows 2003 doma
- Next by thread: Re: Restricting few users only to logon to a PC in a Windows 2003
- Index(es):
Relevant Pages
|
