Using AD how to restrict users to logon to specific mechines

[Lalanthi]

Could anyone tell me using AD how to restrict users to
logon to specific mechines.

thanks

 

[Herb Martin]

It's not easy or obvious.

The standard way to set UserA to logon to ONLY Machine1-Machine10
is to do this in the User's individual account properties.

 

[Cary Shultz [A.D. MVP]]

Lalanthi,

There is a tab on each user's profile called Account. There is a box called
'logon to...'. You can enter the computer accounts to which the user is
allowed to logon in that area.

Another method is to use cconnect from the WIN2000 Resource Kit. However,
this creates a situation where a user can be logged on to one computer at a
time ( not sure if it restricts on to which computers the user is allowed to
logon ).

What are you trying to do?

Cary

 

[Guest]

Thanks a lot Cary.

-----Original Message-----
Lalanthi,

There is a tab on each user's profile called Account. There is a box called
'logon to...'. You can enter the computer accounts to which the user is
allowed to logon in that area.

Another method is to use cconnect from the WIN2000 Resource Kit. However,
this creates a situation where a user can be logged on to one computer at a
time ( not sure if it restricts on to which computers the user is allowed to
logon ).

What are you trying to do?

Cary




.

 

[Cary Shultz [A.D. MVP]]

You are welcome.

Let us know if you have additional questions.

Since I am here, if you have a lot of user account objects you *might* want
to look at ldifde to do this.

Cary