Restrict non admin login!?

[jaco]

I'm sure this has been covered 100 times but my search
turned up nil.

What is the easiest way to prevent a 'Domain User' from
logging into a NT/W2K server? I want to restrict logins
to local/domain admins only.

Thanks
jaco

 

[Steven Umbach]

That is the default configuration on domain controllers and you can configure
that on the appropriate security policy - local/OU via security settings/local
policies/user rights assignments - logon locally. Remove everyone/users from
that user right. I suggest not using the deny setting as administrators are also
members of the users and everyone groups. The Local Security Policy is
secpol.msc.--- Steve

 

[Steven Umbach]

I should add remove all group except those you want to logon. There may also be
other groups in that setting in Local Security Policy. --- Steve