Results 1 to 2 of 2

Thread: How to restrict use of computers to several domain user only

  1. #1
    Join Date
    Mar 2009
    Location
    Colombo
    Posts
    1

    How to restrict use of computers to several domain user only

    hi,

    I've an active directory on win2003 server. There are around 100 employees in my company. I have separate OUs for each Department and in each Department OU i've separate OUs for computers, groups and users.

    All my domain computers are Windows XP with Service pack 2.

    I've a problem.

    Usually several users log into a single PC in our company and those same PCs have valuable data which should not accessed by other users. So other domain users should not log into that PC other than the allowed users. (only in some departments). Some departments have several PCs in such manner.

    So the problem is that i cant add another OU for such PC and give a GPO restricting "deny logon locally" because i have to create 30 OUs if there are 30 PCs in my domain that several users login.

    So is there a way that i can restrict specific Domain computer to be logged in by only allowed domain users and there are several PCs in each department. and i need to applyu the same rule to them accordingly.

    It's like for a PC in finance department...

    (Finance-PC-A) , only allowed users can login (USER-A,USER-B)
    (Finance-PC-B) , only allowed users can login (USER-C,USER-D)

    Thanx & Regards,
    Tharaka

  2. #2
    Join Date
    Jan 2006
    Posts
    3,792

    Re: How to restrict use of computers to several domain user only

    You need to manage the user rights for logon locally and deny logon locally to do what you want. Keep in mind however that deny logon locally trumps logon locally so be careful and try to manage those user rights. For instance you could create a global group, add users to that global group that you do not want to logon to a computer and then add that group to the deny logon locally user right for that computer. That can also be applied at the OU level for computer accounts that exist in the OU via a Group Policy linked to that OU.

Similar Threads

  1. How can i restrict user?
    By cracker1985 in forum Active Directory
    Replies: 1
    Last Post: 18-05-2011, 02:42 AM
  2. How to restrict creation of a VM on Windows 7 in domain?
    By Just-Margaret in forum Networking & Security
    Replies: 4
    Last Post: 22-08-2010, 05:07 AM
  3. Making a user Local Admin on domain computers
    By Niklas Ramstedt in forum Windows Server Help
    Replies: 1
    Last Post: 29-04-2008, 02:41 PM
  4. How can I restrict internet access for one user?
    By Ulupy in forum Windows Security
    Replies: 2
    Last Post: 17-01-2008, 10:26 PM
  5. Replies: 4
    Last Post: 10-02-2007, 02:41 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,711,631,103.09983 seconds with 17 queries