Restricting Client Logon's

[Guest]

I've looked all through out Group Policy for this, so here goes...

How do I restrict only certain Domain Users from being able to Logon to a specific Client PC. For example; Jane has a PC that is accessable to multiple people with Domain Accounts, but I only want Jane to be able to Logon to this PC. Is there a way to restrict who has the ability to Logon to a client even though many people may have Domain Accounts???

 

[David Jones]

The "Allow logon locally" (log on locally for XP
workstations) User Right Assignment controls this. If
you only put Jane in this list, only Jane is allowed to
log on. There is NO workaround for this without
reinstalling, so make sure you add Administrator or
understand that you need to reinstall if for some reason
Jane can not log in ever again.

-----Original Message-----
I've looked all through out Group Policy for this, so here goes....

How do I restrict only certain Domain Users from being

able to Logon to a specific Client PC. For example; Jane
has a PC that is accessable to multiple people with
Domain Accounts, but I only want Jane to be able to Logon
to this PC. Is there a way to restrict who has the
ability to Logon to a client even though many people may
have Domain Accounts???

 

[Guest]

Thanks David for the quick reply...

Sorry but where is the "Allow Logon Locally" found??? Is it in Group Policy and if so under what heading??? I assume when you say "Logon Locally" this means they can logon to the "Domain" (not Local Machine) but it restricts "Who" can logon "Locally" to the Domain. Correct??? Thanks again for the speedy reply!!!

 

[Guest]

Never mind David....I found it under Group Policy....Thanks much for the help!!!