Group logon Deny

[Ted]

Looking for help to setup a policy to deny a group of
users from logging on to a specific group of workstations.

Help!!

TIA
Ted

 

[Buz [MSFT]]

Add the users to a group.
Add the Workstations to a group
Create an OU and put the Workstations there.
Create a GPO for this OU, add the user group to Deny Log on Locally.



Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Guest]

Is there any other way aside from putting the specified
computers into their own OU? I was aware of the seperate
OU method.

I have tried with no luck to create two groups, one for
the users (Instructor - Deny ) and one for the PC's
(Workstations - Deny). I set the group policy to Deny
Logon from network for the specific Users group and then
added the computer group to security and set the security
on the policy to apply policy for the said computer
group. I also tried reversing the roles of the two groups
in this policy also, but this did not appear to work.

 

[Ted]

I almost forgot. I want to deny network logon, as I have
no local user accounts on any of my pc's.

 

[Buz [MSFT]]

Create an OU and put the Workstations Group there.

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.