Restricting Users from Logging onto specific PCs from the PC itself

[Homer]

Hello everyone..

Does anyone know of a way to restrict logons to a PC from
the PC itself, rather than setting it from the server. I
know you can restrict who can log onto what PC from NT
User Manager, but I want to restrict users from logging
onto the PC from the PC itself.

Any suggestions..?

Thanks..

 

[Oli Restorick [MVP]]

No problem.

Users get the ability to log on by being members (either directly or by
virtue of group membership) of the groups called "users". In a domain
environment, by default the membership of this group is "domain\domain
users".

You can remove this group and place in it only those users or groups you
want to be able to log in.

Beware, though, that you don't inadvertently lock yourself out of your PC by
removing your own ability to log on.

Oli