No announcement yet.

Disable logon to specific domain

  • Filter
  • Time
  • Show
Clear All
new posts

  • Disable logon to specific domain

    I have a root domain with 2 child domains in the same forest (Root, Child1, Child2). It looks like from what I have read (I could be wrong), a user in Child2 domain can logon to Child1 domain because of the default two way transitive trusts between the domains.

    We would like to dedicate some workstations so that only Child1 domain users can use them. Is there a policy that can be used to accomplish this so that only domain users from Child1 can use these workstations?

    Thank you

  • #2
    Re: Disable logon to specific domain

    Users can not "log in" to a domain for which they have no user account in. Set up properly (or improperly), they can however be authenticated to access resources in the trusting domain (the domain with the resources in it which you want them to stay out of).
    VCDX3 #34, VCDX4, VCDX5, VCAP4-DCA #14, VCAP4-DCD #35, VCAP5-DCD, VCPx4, vEXPERTx4, MCSEx3, MCSAx2, MCP, CCAx2, A+ - VMware Virtualization Evangelist
    My advice has no warranties. Follow at your own risk.