Deny Login Locally To Servers

Discussion in 'Active Directory' started by Ari, Dec 30, 2008.

  1. Ari

    Ari Guest

    We have 30 servers, how can I allow each technician to login to their servers
    only (that they manage) and not to the others…

    Do I have to make multiple OU’s assign different GPO’s to it and add those
    servers to each OU? I’m not sure how to accomplish this.

    Any help is greatly appreciated
    Ari, Dec 30, 2008
    1. Advertisements

  2. Ari

    Jorge Silva Guest

    for example, you can use local or domain GPO and define who can login
    interactively or/and via TS on those severs.
    I hope that the information above helps you.
    Have a Nice day.

    Jorge Silva
    MCSE, MVP Directory Services

    Please no e-mails, any questions should be posted in the NewsGroup
    This posting is provided "AS IS" with no warranties, and confers no rights.
    Jorge Silva, Dec 30, 2008
    1. Advertisements

  3. Hello Ari,

    Use your GPO's locally or OU based and define them. If it is only a one time
    setting you can also do it manual over local users and groups.

    Best regards

    Meinolf Weber
    Meinolf Weber [MVP-DS], Dec 31, 2008
  4. Ari

    Paul Bergson Guest

    Depending on the number of technicians etc... It may be just as simple as
    creating a few global groups and placing them in the appropriate local
    groups on the member servers. You should provide a few more details.

    If you are talking about three techinicians each managing 10 servers, create
    three global groups and place these global groups in either the TS local or
    local admins group. Not sure how much power they need.
    Paul Bergson, Jan 2, 2009
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.