No local access user/group

[Tumurbaatar S.]

How to create a user/group that has access to a system
thru a network (or whatever) but cannot logon locally thru
a keyboard?

 

[Roger Abell]

In Pro you only need to define an account and then either
1. place the account into the policy to Deny logon locally
or
2. make sure the account is not in the policy granting Logon
on local
You find these user rights in the Local Security Policy