Announcement

Collapse
No announcement yet.

log on locally

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • log on locally

    Hay

    I have 2 questions :
    1. How can i disable the option for all users in my domain to login to all stations? I want to make it by default for all current users and new users

    2.After i did this how can i configure specific users to log on locally to the stations with local admin privileges on the stations?

    Thanks

    Elad

  • #2
    If you go into Active Directory Users and Computers, you have the option in user properties to restrict which computers they can log onto. Note this is per user, so depending on the size of your domain it will be a lot of work to restrict them to only a computer.
    If you can be a bit more flexible (group of users can log onto group of computers) you could play with group policies using the Deny Logon Locally user right - even then I would ask WHY you need to restrict users in this way and why you cannot e.g. have an Acceptable Use Policy (with sanctions for non-compliance) combined with auditing to ensure users follow it.

    Local Admins can be set via restricted groups - again depending on the size of the environment, this may be difficult to set up.
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Damn, don't have a DC at the moment but is that one of the options where you can select multiple User objects, right click, Properties and apply that setting to them all at once? Guess I had better build a DC tomorrow.
      1 1 was a racehorse.
      2 2 was 1 2.
      1 1 1 1 race 1 day,
      2 2 1 1 2

      Comment

      Working...
      X