Prevent Local logon to compuer

[Guest]

I have an XP machine that's physically connected to our domain. I want to
restrict user access to that machine specifically to two people
only(administrators and to a jane doe user). Therefore no other domain user
can logon to that machine and just the two specified users. Is there a way
to do this?

 

[kurttrail]

I have an XP machine that's physically connected to our domain. I
want to restrict user access to that machine specifically to two
people only(administrators and to a jane doe user). Therefore no
other domain user can logon to that machine and just the two
specified users. Is there a way to do this?

See your Sys Admin.

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.com/mscommunity
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei"

 

[Guest]

Yes. But, depending on how large a network and how many users there are it
could be an exhaustive process. In active directory on the user properties
of every user not including Admins and Jane Doe choose the logon to button
and choose all the computers except the the computers you want to restrict.
Then for admins and Jane Doe leave the default setting of all computers. Ya,
this is a sledge hammer approach but i looked in AD and the local securtity
policies and could not find a more direct and efficient route. It may be
easier to just SysKey the machines. Syskeying would force any logon at the
console to provide the floppy with the syskey or no local console logon
occurs, period. No crack or hack utillities would be able to work around
this as the system does not respond -- short of stealing the drive. The draw
back to this is if you loose the disk you might as well reload the system.

Beau