Re: prevent user from logging on to servers

Do not grant the user right to Log on locally to those users or to
any group that contains (directly or indirectly) those users.
There is a matching policy to deny that user right, but if possible
a positive statement of who should have the right is best.
For a server, consider defining a group like LocalLogon and
put non-admin accounts that need this right in that group, then
alter the Log on locally user right so that Administrators and
LocalLogon are granted the right. Be sure to allow machine
local accounts that need the right (IWam_, etc.).

You likely have in the user right at present, Users (which itself
has Domain Users, Interactive, and Authenticated Users), Power
Users, and Everyone


"Dan" <ddonahue@xxxxxxxxxxxxxxx> wrote in message
news:OXLEeYMVGHA.224@xxxxxxxxxxxxxxxxxxxxxxx
There are several users that we'd like to prevent from logging on to
servers. Is there any way to do this?

Thanks,

Dan




.