Networks
We have a computer that's part of the domain. What is the best way to lock that computer down so that only a certain group of users can access it?
Currently we're running Windows XP for the desktop and Windows Server 2003 SBS for the domain controller.
Thank you.
by rigo(cmp) Accepted solution
by cg it Accepted solution
there are some methods that admins use and that's the logon locally security setting. however, that only applies to local machine console logon and not domain logon. If they log on to the domain, domain group policy overrides local machine group policy.
Even if you use the domain group policy to configure logon locally restrictions, the restrictions are again, for local logon not domain logon.
To truly restrict domain users from logging on to a particular machine, you have to configure their active directory domain accounts properties to allow logon to specific machines, omitting the one you don't want them to be able to logon to.
by twors88 Accepted solution
by ic-it Accepted solution
When you set the OU to Log on Locally, you can add specific local and Domain users and/or Groups.
We used this method a few years ago to allow administrators and a special group access to a set of systems and no one else could access them, to include other domain members.
This discussion is closed to new replies.
Sort by Trending