Restrict users from using other PCs

  • Thread starter Thread starter Alvin Navarro
  • Start date Start date
A

Alvin Navarro

To whom it may concern,

I don't know where my question should be posted but, is there a way that I
could restrict domain users from using other WinXP Pro PCs using their
domain account?

I would be most greatful if you could help me on this query.



Regards,

Alvin
 
I would do this:

- Create a list on the server that shows which user
is allowed to use which PC
- Scan this list during the logon process
- If the user is not authorised to use the current PC,
issue an immediate shutdown command
 
You can use the 'Log on to..' dialog in the user's properties dialog and
specify which computers they can logon to. Or use GPO's on the machines and
specify which users that can logon to them.

Regards,
/Jimmy
 
I would prefer to use GPO's on the machines but how do I go about it? Should
I go directly on our DC or to every machine? Is there a step-by-step article
that I can use?

Alvin
 
Create a domain wide policy and go to Computer Configuration-Security
Settings-Local Policies-User Rights Assignment and edit the 'Allow log on
locally' setting.

Regards,
/Jimmy
 
Is a "Domain Wide Policy" different from a "Group Policy Object"? Is there a
proper procedure to go about this?

Alvin
 
No, there's no difference. What I meant was that you create a GPO that
affect the whole domain.

Regards,
/Jimmy
 
Do you mean *define* the "Log on locally" *policy*? If so, how? It is just a
list of accounts (groups) intended to work the other way round. Applied to
the domain, I can not see how it would answer Alvin's question.

It seems to me the only way to do it is to use the ADU&C, user properties,
Account, Log On To... as you have also suggested.

Mike D
Corrections are welcome.
 
Back
Top