group policy setting

  • Thread starter Thread starter toddb
  • Start date Start date
T

toddb

i need to find out if it is possible through ad to
prohibit a user from logging on to the local machine,
i.e., changing the "Log on to" box to the local machine
name and logging on locally. is there a computer or user
configuration setting in group policy that will do that?
thanks. tb
 
Yes. Deny their right to logon locally or interactive;y (it's titled
differnet in different OS'). You can change this in teh local group policy
editor (start>run>gpedit.msc).

--
--Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us
Http://www.wpcp.org

Beta #469090
 
Back
Top