Restrict Logons allowed on a workstation

[Guest]

Environment is Windows 2000 Domain with XP SP2 workstations. I need to
configure workstations to allow the following users to login:

Members of the Local Administrator group
Members of the Domain Admins group
Specific domain user account

All other user accounts should not be able to access the workstation.

The preference would be to deliver via Group Policies, however, identifying
the actual configration/settings required would be great.

 

[Lanwench [MVP - Exchange]]

Environment is Windows 2000 Domain with XP SP2 workstations. I need to
configure workstations to allow the following users to login:

Members of the Local Administrator group
Members of the Domain Admins group
Specific domain user account

All other user accounts should not be able to access the workstation.

The preference would be to deliver via Group Policies, however,
identifying the actual configration/settings required would be great.

You might try microsoft.public.windows.group_policy for more help. Or just
enter the user's designated computer name in the "allowed to log in to"
field in that user's ADUC properties.