Announcement

Collapse
No announcement yet.

Limit only certain group to logon to workstation

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Limit only certain group to logon to workstation

    Hello Team,

    I would like to you GPO to limite user to logong to the computer.
    I have Sales and Marketing group. but I only want Sales Security group to have access to those computer.

    Im thinking on GPO it should be COmputer Configuration->Resticted Groups

    1. Add Group
    . Mydomain\Sales

    Would this does it?

    Thanks,
    HN

  • #2
    Re: Limit only certain group to logon to workstation

    You need to look into user rights -- allow logon locally is the one you need -- and assign that to the group, removing other groups
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Limit only certain group to logon to workstation

      Im not follow.. would you mind elaborate a little?

      Thanks,
      HN
      Originally posted by Ossian View Post
      You need to look into user rights -- allow logon locally is the one you need -- and assign that to the group, removing other groups

      Comment


      • #4
        Re: Limit only certain group to logon to workstation

        Create a GPO and set the "allow logon locally" user right to the Sales group (and remove all others except admins)

        Apply the GPO to an OU and put the computers in the OU
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment


        • #5
          Re: Limit only certain group to logon to workstation

          Found it..
          Appreciate your help Ossian!!

          HN

          Originally posted by Ossian View Post
          Create a GPO and set the "allow logon locally" user right to the Sales group (and remove all others except admins)

          Apply the GPO to an OU and put the computers in the OU

          Comment

          Working...
          X