dani said:
Hi,
Where can I define, which user or group can logon (as a
domain user) to what workstation?
Thanks for your feedback, Dani
On the workstation in question, you can go to Local Security Settings
(in the Administrative Tools) > Local Policies > User Rights Assignment.
There you will find a field titled "Log on locally". Remove the
groups you don't want to allow and add those that you do. You can
specify a domain object with DOMAINNAME\objectname.
You can also do it from the domain users and computers applet on the
server. From the user or group's properties you can select the
workstations to which they are allowed to log on.
We have datastations for scientific instruments where I work and we
create special domain accounts for using them. We set the special
accounts so that they can only log on to the datastations (using the
second technique) and then we set the datastations so that regular users
can't log on to them (using the first technique).
Hope that helps,
Dana Robinson
