Deny User Access to Workstation

[Guest]

I hope that I am posting this to the proper spot, if not I appologize in
advance. I need to restrict access to a certain work station so that only
Domain Admins and one particular Domain User can log onto this machine. Does
anyone know the easiest way to do this?

 

[Steven L Umbach]

If it is XP Pro configure Local Security Policy [or whatever Group Policy
enforces the user right] to include only domain admins, administrators, and
the domain user for the user right for logon locally. Even if you leave out
administrators I am pretty sure a local administrator can still logon but
that should get you close to what you want. Use secpol.msc and go to local
policies/user rights - logon locally. Note that a lack of a user right is an
implicit deny so you don't need to add any others to the user right for deny
logon locally and if you include everyone or users it will also apply to
domain admins and local administrators.

Steve