Question

Locked

Restrict computer access to certain users

By Rigo(CMP) ·
We have a computer that's part of the domain. What is the best way to lock that computer down so that only a certain group of users can access it?

Currently we're running Windows XP for the desktop and Windows Server 2003 SBS for the domain controller.

Thank you.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

humm for domain group policy

by CG IT In reply to Restrict computer access ...

there are some methods that admins use and that's the logon locally security setting. however, that only applies to local machine console logon and not domain logon. If they log on to the domain, domain group policy overrides local machine group policy.

Even if you use the domain group policy to configure logon locally restrictions, the restrictions are again, for local logon not domain logon.

To truly restrict domain users from logging on to a particular machine, you have to configure their active directory domain accounts properties to allow logon to specific machines, omitting the one you don't want them to be able to logon to.

Collapse -

Logins

by Twors88 In reply to humm for domain group po ...

Set up time windows for that computer to be logged in. Only certain users can log in during these hours. Or make it so that the users you want are in a different OU.

Collapse -

Yes and no

by IC-IT In reply to humm for domain group po ...

When you set the OU to Log on Locally, you can add specific local and Domain users and/or Groups.

We used this method a few years ago to allow administrators and a special group access to a set of systems and no one else could access them, to include other domain members.

Back to Networks Forum
4 total posts (Page 1 of 1)  

Hardware Forums