Prevent all users from any other OUs from logging into Special OU

[Guest]

Environment:
AD on 2003
Multiple OUs
Of special note: Special XP workstations and users are in the same OU
("SpecialOU").

*******
How can I prevent all users from any other OUs from logging into
workstations in OU "SpecialOU"?
*******

(For Intellectual Property reasons, I cannot allow users that are not in OU
"SpecialOU" to log into "SpecialOU" workstations.)

Needless to say, I'm looking for the simplest solution possible and one that
will not need continuous modifications as users or workstations are added.

I don’t mind 3rd party solutions as long as easy to manage and centrally
managed.

Please be as specific as you can in suggested courses of action. I do not
have a high level of AD or group pol expertise.

Thank you for your time.

 

[Guest]

Hi, I don't have a direct answer to your issue, just some resources you may
be interested in. Go to: http://www.microsoft.com/webcasts and look for
webcasts regarding Group Policy. There are two series, one three part, each
approx. one hour long general overview of Group Policy, which may have your
answer, and another fourteen part series of about one hour each on more
detailed Group Policy which will absolutely have your answer. I just finished
part two in the overview and if I remember right it contained information on
adding individual groups to GPOs which exclude others from any ability to
logon to those workstations. Good luck and I hope you get your answer soon,
--
Seree

Small disclainer:My posts are primarily directed towards home and small
office users as I am not an IT expert, but learning fast and gaining knowlege
daily. ;-)