Re: Deny Logon Locally

From: Justus (justus@dotcool.com)
Date: 08/01/02 

From: "Justus" <justus@dotcool.com>
Date: Thu, 1 Aug 2002 09:31:27 -0400

I will be following the other 2 suggestions on removing local users but
would also like to add all together deny local users logon. Would I set that
in the Local Security Policy for each computer under User Rights Deny logon
locally or on a DC under Domain Policy user rights?
-Justus
"Jim Campau (A+ MCSE)" <Jim_Campau@bausch.com> wrote in message
news:#mqJawNOCHA.2576@tkmsftngp08...
> You can set the local logon rights to any one or group you want. This does
> not effect network log on rights.
>
> "Justus" <justus@dotcool.com> wrote in message
> news:ai9k8b$12aakk$1@ID-56130.news.dfncis.de...
> > If I am using AD and want me users to have to logon to a the domain and
> not
> > logon to there computer locally is there something I can implement in a
> > domain policy or group policy? I was reading about deny log on locally
but
> > was not sure if that prevented from logging on to the machine all
> together.
> > I don't want any of my users using any local users for the computers
only
> > logging on through the domain. What is the best way to implement this?
> Some
> > of the user already have administrator accounts locally so they know how
> to
> > create new local accounts. Any help or suggestions would be appreciated.
> > -Thanks
> > Justus
> >
> >
>
>

Relevant Pages

  • Re: Deny Logon Locally
    ... > would also like to add all together deny local users logon. ... > locally or on a DC under Domain Policy user rights? ...
    (microsoft.public.win2000.security)
  • RE: Cant manage Local Users and Groups on Win2K terminal server
    ... Then it seems that your GPO isn't applied as you want it, ... Domain Policy, but I assume you mean that you undo the settings? ... If I logon on locally, ... >> managing Local Users and Groups enabled. ...
    (microsoft.public.windows.terminal_services)
  • Deny Logon Locally
    ... If I am using AD and want me users to have to logon to a the domain and not ... domain policy or group policy? ... was not sure if that prevented from logging on to the machine all together. ... I don't want any of my users using any local users for the computers only ...
    (microsoft.public.win2000.security)
  • Re: system cannot log you on now because the domain PCname123 is not available
    ... Are you logging on as the local Administrator - are you sure you're not ... using a domain account to try to login locally. ... Log onto the Domain and check the local Users & Groups - check the local ... And all I want to do it's logon to local box NOT the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Deny Logon Locally
    ... Do you have another suggestion I could do use with Group Policy? ... >> would also like to add all together deny local users logon. ... >> in the Local Security Policy for each computer under User Rights Deny ...
    (microsoft.public.win2000.security)