Computer Lockdown

[Megladon]

I have a Windows XP computer in an NT4 domain. I have
joined the domain with this computer. Right now any
domain user can log onto this computer with their
username & password. I would like to set it up so that
only a selected few people from the domain can actually
log onto this computer. Maybe I'll make a group or
something. Is there a way to restrict access to this
computer to all of the other domain users? If so, how do
I set this up?

 

[Colin Nash [MVP]]

Control Panel ---> (classic view) ---> Administrative Tools--> Local
Security policy ---> look under Local Policies --> User Rights Assignment
and play with the Deny Logon Locally or Allow Logon Locally policies, as
appropriate.

Keep in mind that Deny overrides Allow so if you deny Everyone, you will be
locking yourself out. Be careful. You can specift groups in here too.

A more common solution is to control, at the domain level, the machines that
each user can log into. NT4 domains have this capability. This requires
Administrator or Account Operator rights on the domain though, and isn't
practical if this is the only machine you want to restrict this way.

 

[Megladon]

That's exactly what I was looking for. Thank you. There
is only one computer that needs restricted access at this
time, so this is a perfect solution.