Domain users Log on Locally

[Azeem Mohammed]

How do I prevent my Domain users from logging on locally
to my W2K servers and at the same time allow local admins
and domain admins to log on locally?

thanks All.
A.

 

[Steven L Umbach]

Configure the user right assignment for "logon locally" to have just the
required users/groups being similar to what it would be in Domain Controller
Security Policy [no users or everyone group] . You can configure Local
Security Policy for the servers or do it at the OU level if they are in
their own OU. --- Steve