No announcement yet.

Stop user logon

  • Filter
  • Time
  • Show
Clear All
new posts

  • Stop user logon

    I have a few accounts that are for website authentication and would like to stop those accounts from being able to logon to workstations.

    i.e. They account works to authenticate to the webserver but you cannot log onto a workstation in the domain using that account.

    Anyone know how to do this?

  • #2
    In Group Policy (or the local security policy, if this is a standalone server), navigate to Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment. From here you can specify which users and groups can and cannot log on locally to a particular machine or group of machines. You want "Deny Log on Locally".

    As with any security-related settings, test this thoroughly before deploying it in a production environment to avoid any unexpected results.

    ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **