Re: Domain Logon

anonymous_at_discussions.microsoft.com
Date: 07/31/04

  • Next message: Robert Gu [MSFT]: "Re: EFS certificate renewal"
    Date: Fri, 30 Jul 2004 21:29:02 -0700
    
    

    Hi Steven
     Thanks for the info ,will look your suggestions.

    Cheers

    >-----Original Message-----
    >There is no built in Group Policy to do such but here are
    some options.
    >
    >-- In AD Users and computers in the user account
    properties you can restrict
    >which domain computers a domain user can logon to.
    >
    >-- You can use the user right for logon locally and deny
    logon locally to
    >control what computers a user can logon to in the domain.
    >
    >-- Cconnect from the Resource Kit can do what you want
    but requires a client
    >component and the use of a SQL server on the network. See
    the link below about
    >cconnect, some info on it and a third party solution
    called UserLock which runs
    >as a service. --- Steve
    >
    >http://is-it-true.org/nt/atips/atips331.shtml
    >http://support.microsoft.com/default.aspx?scid=kb;en-
    us;260364 -- may work for
    >some networks.
    >
    >"lithonius" <anonymous@discussions.microsoft.com> wrote
    in message
    >news:796301c476a3$149ae9a0$a301280a@phx.gbl...
    >> Hi All,
    >> Need some help, I have a win2k server running AD with
    35
    >> users divided into 4 diff departments. Each dept. has
    it's
    >> own GPO with the default domain GPO also set. My
    question
    >> is this how does one prevent one user from logging onto
    2
    >> diff. clients with the same login a the same time? I
    have
    >> users logging on in one dept. then logging on another
    dept
    >> at the same time. Anyone with any ideas?
    >>
    >> Cheers
    >
    >
    >.
    >


  • Next message: Robert Gu [MSFT]: "Re: EFS certificate renewal"

    Relevant Pages

    • Re: Domain Logon
      ... which domain computers a domain user can logon to. ... > users divided into 4 diff departments. ... > own GPO with the default domain GPO also set. ... > users logging on in one dept. then logging on another dept ...
      (microsoft.public.win2000.security)
    • Re: Login Errors Seem to indicate we are being hacked?
      ... I have turned on diagnostic logging on SMTP. ... we could turn something off on our own SMTP server to stop the devils from ... Logon Failure: ... Caller User Name: SERVER01$ ...
      (microsoft.public.windows.server.sbs)
    • RE: Logging for Remote Web Workplace?
      ... Category: Account Logon ... However, even the user is logging on domain, the client will not ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
      (microsoft.public.windows.server.sbs)
    • Re: track user logons
      ... including user actions such as logging on and logging off, and the success and failure of key ... Before you enable auditing, it will be important for you to define exactly ... For example, if you decide to audit account logon sessions, you need to consider what the information ... Your security administrators group might be interested in logging failed logon events ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Unable to find domain controller. User will be logged using local credentials
      ... I change the registry entry on a NT machine and it resolved the logon issue ... when logging off and logging back in. ...
      (microsoft.public.windows.server.migration)