User Manager...User Properties

Unless you want to restrict a particular user to a specific workstation, you should leave the default setting, which is, "User May Log On To All Workstations." This will allow a specific user to logon from any workstation.

Here's a way I think would work - although it may not fit into your situation and will only work if all of your workstations are NT: Create a separate global group in your domain for the users that you want to limit to the lab workstations, i.e., "lab users" group. Then, add your users to the domain and put them in this group. Don't put them in any other groups (i.e., remove them from the Domain Users group and remember - they will still have domain-level access to anything that's in the "Everyone" global group). On the lab workstations, add the global "lab users" group to the local Users, Power Users, or local Administrators group (depending upon what level of access they need to the workstation). This will allow them to log on to thelab workstations, but since their group will not have any rights to any other workstations or resources in the domain, they will not be able to log on anywhere else. As I said, this only works if all your workstations are NT, since Win95/98 does not have this level of security. Hope this helps!

The Workstation restriction only works correctly with NT not 95/98. As will all NT Security settings some work with Win9x (almost) most don't

This question was closed by the author