Re: avoid users to login in other computers



The two ways I can think of are in their user account properties - allowed
to logon to, and the user right for logon locally managed by Group
Policy/security policy. Though somewhat time consuming depending on the
number of domain computers you could modify a domain computer's Local
Security Policy [secpol.msc] to contain perhaps administrators and the
domain user/users allowed to logon to that computer. This assumes that user
right is not managed by a domain level Group Policy in which case you could
not modify that user right on an XP Pro computer.

Instead of visiting each computer you could use Remote Desktop for XP Pro to
logon remotely to manage Local Security Policy or use the NTrights utility
from the Resource Kit as shown in the link below to manage user rights
remotely. The user right specified in NTrights is case sensitive and you
would have to use -r to revoke those users/groups you do not want included
and +r to add the users/groups you want added.

Steve

http://support.microsoft.com/kb/315276 --- NTrights
..
<nitoglycerine@xxxxxxxxx> wrote in message
news:1192458793.679750.282390@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,

Some one here can list the ways to avoid users to login in other
computers? I mean let him access only to his own computer. I tried by
the AD but when I do it they cant install the exchange mailbox in
their non-domained laptops, even I give access to my exchange-server
and DC.

Thanks



.



Relevant Pages

  • RE: Remote Workplace
    ... Please ensure the laptop located in LAN network and joined the domain, ... Click Select Remote Users, ensure the user is in the users list. ... quotation marks) on the computer and then logoff and logon the laptop. ... The error "The local policy of this system does not permit you to log on ...
    (microsoft.public.windows.server.sbs)
  • Re: Server 2K3 Remote Desktop Access - is this right place?
    ... All roads for that particular error of 'You do not have access to logon to ... On Windows Server 2003, launch GPEDIT.MSC from Start -> Run. ... Drill down and expand the following for Local Computer Policy: ... > Strange - when I activate the Remote Desktop Terminal from the server, ...
    (microsoft.public.win2000.advanced_server)
  • RE: HELP!!!!
    ... I understand that users can not logon to the SBS ... server computer side) or when users logon the server using Remote Desktop ... The error "The local policy of this system does not permit you to log on ...
    (microsoft.public.windows.server.sbs)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • RE: Event ID 537 and Kerberos
    ... a logon type of 3 translates to Network. ... Click Services tab and select Hide All Microsoft Services and Disable ... Step 4: Configure account lockout policy. ... and then click Account Lockout Policy. ...
    (microsoft.public.windows.server.sbs)