Re: Disabling Interactive Login

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 08/23/05 

Date: Mon, 22 Aug 2005 23:34:04 -0500

You can configure security policy which is a subset of Group Policy to
modify user rights for logon locally or deny logon locally. For instance
you could create a global group and add it to the deny logon locally user
right via Group Policy to all computers in a domain or Organizational Unit.
Be careful with deny user rights as they override the companion allow user
right and keep in mind that administrators are members of users,
authenticated users, and everyone groups. --- Steve

"-KK-" <KK@discussions.microsoft.com> wrote in message
news:14787456-9319-4E3E-9E6B-303C970534C7@microsoft.com...
> We've been working on an in-house application that works through an
> portal.
> Users who log-in through this portal use LDAP to authenticate through
> Active
> Directory.
>
> Is is possible to make these logins disabled from being able to
> Interactively Login to a desktop machine on the domain..?
>
> If so which method would be the best way..? Using Group Policies or is
> there
> a better option within Active Directory.
>
> Thanks,

Relevant Pages

  • RE: Re-installed XP Pro - admin accounts now blocked
    ... I would start by checking group policy to make sure the administrators ... User Rights Assignments. ... <10 days ago I performed a repair installation of XP Pro after upgrading ...
    (microsoft.public.windowsxp.setup_deployment)
  • RE: User viewing only their own drive/folder in XP Home
    ... you will need to implement Group Policy. ... Windows XP Home Edition does not have Group Policy, ... Windows XP Professional Edition to implement Group Policy. ... Group Policy set user rights. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Blocking Cleint Games
    ... play Pac-man. ... phones, ceiling tiles, or whiskey! ... don't have local admin or power user rights on their workstations. ... Otherwise, group policy is definitely what you need here, if you're ...
    (microsoft.public.windows.server.sbs)
  • Re: Blocking Cleint Games
    ... you need to find out where in the registry & file system the ... app needs write access, and then adjust same, accordingly. ... have local admin or power user rights on their workstations. ... Otherwise, group policy is definitely what you need here, if you're ...
    (microsoft.public.windows.server.sbs)
  • Re: GPOs werden genau EINMAL angewendet :-(
    ... Reset User Rights in the Default Domain Group Policy ...
    (microsoft.public.de.german.win2000.gruppen_richtlinien)