Re: Prevent logons other than PC owner?

If you take control over the Log in locally User Right of the machine
then you can specify exactly what accounts can log into it.
Ususally you will find Users granted the right on a client system.
In a domain Users includes Domain Users, etc.
What you would need to do is to change the local policy (either directly
or by use of GPO) so that its policy for the User Right to Log on locally
states only the accounts that should be allowed (such as Administrators
and domain\usernameX

"Mike Bailey" <mbailey@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:uyNUHzuGGHA.3624@xxxxxxxxxxxxxxxxxxxxxxx
> We run a Server 2003 Domain with XP workstations. Of course, users log
> into the domain with their own userid/password. I've been asked if there
> is a way to prevent anyone else besides the "owner" of the PC to log on at
> that PC. I didn't think so since they are not logging into the PC but
> rather the domain. IS this possible through a group policy or something?
>
> Thanks,
> Mike


.

Relevant Pages

  • Re: Help needed to lock laptop down for users.
    ... Local Security Policy not applied to all accounts equally ... It is crude, but you can Deny Full Control, to those accounts ... > We have just taken delivery of 10 laptops which are for a students. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Group Policy: multiple password policies in the same domain?
    ... > it under access to the GPO. ... The conflict only happens when both policies ... results in having the policy denied. ... > user accounts it affects be able to read it and have "apply ...
    (Focus-Microsoft)
  • Re: Password Policy Basics
    ... but assumed the POLICY would be applied to ALL ... so lcoal machines might start enforcing that policy on ... No, the local accounts are not effected by the domain policy, except you link the policy also to the OU like Florian states. ... I was thinking of service accounts on the servers... ...
    (microsoft.public.windows.group_policy)
  • Re: Windows 2000 users accounts get locked out
    ... I have disabled my accounts lockout policy in my ... >account logon events enabled in Domain Security Policy ... and Domain Controller ...
    (microsoft.public.win2000.security)
  • Re: AD 2000, Blank passwords, and Group Policy
    ... I set up an account with password policy enforced and experienced the same as you ... The only thing I can suggest is to leave the accounts as they ... accounts to change password at next logon. ... I could set the policy to not enforce this until after all ...
    (microsoft.public.win2000.security)