General discussion

Locked

how to assign group log on locally right

By greg ·
I want to create a group in active directory for each server in my domain and then give each group the right to log on locally to that specific server. I need to be able to restrict who can log on to the server console to Administrator and the specific group for each server. I think this is done the group policy settings on the local machine but I am confused about how domain or OU policy settings might override the local settings. Do I need to create a new OU and move all of the servers into it first?

I am looking for specific instructions or links to detailed articles.

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Grzegorz_Osimowicz In reply to how to assign group log o ...

This can be tricky. By default any domain user will be able to log on to any computer (workstation or server) as long as it is not a DC.

If you wanted to restrct the ability to a given group only you would need to create an additional OU and move the limited-acess servers into the OU.

You would then need to create a new GPO, assign it to the new OU and set the correct user rights:

The new GPO > Computer configuration >windows settings > security settings> Local policies >User Right Assigment

> deny logon locally > all the groups you do not want to have local access to the server .


Regards,

Greg Osimowicz
MCSE, A+, Network+

Collapse -

by greg In reply to

Poster rated this answer.

Collapse -

by greg In reply to how to assign group log o ...

The first answer is good but I am hoping for additional insight or tips that might make this easier. I do not relish the idea of maintaning deny lists because they can get out of date quickly.

All sincere suggestions will be accepted.

Collapse -

by greg In reply to how to assign group log o ...

Point value changed by question poster.

Collapse -

by greg In reply to how to assign group log o ...

This question was closed by the author

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums