Using AD how to restrict users to logon to specific mechines

  • Thread starter Thread starter Lalanthi
  • Start date Start date
L

Lalanthi

Could anyone tell me using AD how to restrict users to
logon to specific mechines.

thanks
 
It's not easy or obvious.

The standard way to set UserA to logon to ONLY Machine1-Machine10
is to do this in the User's individual account properties.
 
Lalanthi,

There is a tab on each user's profile called Account. There is a box called
'logon to...'. You can enter the computer accounts to which the user is
allowed to logon in that area.

Another method is to use cconnect from the WIN2000 Resource Kit. However,
this creates a situation where a user can be logged on to one computer at a
time ( not sure if it restricts on to which computers the user is allowed to
logon ).

What are you trying to do?

Cary
 
Thanks a lot Cary.
-----Original Message-----
Lalanthi,

There is a tab on each user's profile called Account. There is a box called
'logon to...'. You can enter the computer accounts to which the user is
allowed to logon in that area.

Another method is to use cconnect from the WIN2000 Resource Kit. However,
this creates a situation where a user can be logged on to one computer at a
time ( not sure if it restricts on to which computers the user is allowed to
logon ).

What are you trying to do?

Cary




.
 
You are welcome.

Let us know if you have additional questions.

Since I am here, if you have a lot of user account objects you *might* want
to look at ldifde to do this.

Cary
 
Back
Top