Re: Restricting domain users from logging on to XP

From: Nick Finco [MS] (nfinco@online.microsoft.com)
Date: 03/28/03 

From: "Nick Finco [MS]" <nfinco@online.microsoft.com>
Date: Fri, 28 Mar 2003 09:40:53 -0800

This setting can also be set on all computers in your domain through group
policy. The setting is at the same location in the group policy editor
snapin. Be careful that you don't lock yourself out of your entire domain
though.

N 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
"Andrew" <no@email.support.com> wrote in message
news:#pAnm8U9CHA.1868@TK2MSFTNGP12.phx.gbl...
> On the XP workstation, run Local Security Policy from the Administrative
> Tools folder. Expand Local Policies->User Rights Assignments. Look for the
> Deny Logon Locally policy and set the user's you whish to deny there. You
> may also want to use the Deny access to this computer from the network
> policy as well so that they cannot map drives or get to the system from
the
> network as well.
>
> -------
> Andrew
>
>
>
> "estafford" <estafford your pants @newmancom.com> wrote in message
> news:O5bOwmU9CHA.2364@TK2MSFTNGP12.phx.gbl...
> > Greetings,
> > I have an XP workstation running on a Win2K domain.
> > I want to be able to deny or restrict certain domain users from logging
on
> > to the XP workstation.
> >
> > Any idea how to do this?
> >
> > Thanks.
> > E Stafford
> >
> > =========================
> > To reply to my email, please remove "your pants".
> >
> >
>
>

Relevant Pages

  • Re: hiding contacts from directory search (LDAP)
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... policy and denying that right on the policy. ... the majority that I want to deny makes up about 80-90%. ...
    (microsoft.public.windows.server.active_directory)
  • Re: USB, Floppy & CD Drive access through GPO
    ... So if they are all linked at the domain level, then the last policy that runs will win. ... So, if your deny is at the top of the priority list, and denies all access to these devices, then all computers will receive the deny. ... You can change the order of GPOs linked at that level so that your deny all devices GPO is processed first. ... However, if you have no filtering on the subsequent device-specific allow GPOs, then all computers in the domain will simply get the allow for all devices. ...
    (microsoft.public.windows.group_policy)
  • Re: Loopback Processing and Deny Apply in ACL
    ... The actual group policy is being applied to the user logon, ... If you Apply the policy to a user then Deny ... >> for the terminal server (which is in it's own OU, ... >> setting the deny apply gpo setting in the acl to the user account of this ...
    (microsoft.public.win2000.group_policy)
  • Re: Linux IPChains Question
    ... At the moment I haven't set NAT up, ... ipchains -P forward DENY ... >>I suggest adding an explicit DENY and log rule at the end. ... With iptables, if you set the forwarding policy to drop, you ...
    (comp.security.firewalls)
  • Re: cannot logon locally
    ... For a machine in a domain use a GPO that will apply ... >>equivalent) and then set a deny of full control for the ... >>local policy to remove the obstructing setting. ... >>> not let me logon locally. ...
    (microsoft.public.windows.group_policy)