Restrict user to only certain machines.

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi

I want to restrict some users so they can only log onto the pc's in their
department.
I know it can be done at each user's properties on the account tab but I was
just wondering if it can be done as a group policy so can add the whole group
at the same time.

Thanks
 
You can use the user rights for logon locally or deny logon locally to so
such. Add the users to a global group and create an OU where you place their
computers. For the domain or other OU's add their global group to the deny
logon locally user right for the Group Policies for those containers. For
their OU create a Group Policy Object and configure the deny logon locally
user right to be defined but not contain any users or groups. That should
allow them to only logon to computers in their OU. Be very careful with deny
user rights however as administrators are also members of everyone and user
groups. --- Steve
 
Back
Top