Restrict users access to specific machines using GPO

Discussion in 'Active Directory' started by Mitch O, Apr 18, 2005.

  1. Mitch O

    Mitch O Guest

    I would like to know if anyone has set up a group policy to restrict a group
    of users to specific machines. I am trying to restrict 100 users to be able
    to use 25 machines. They can sign in through out the day, but I want them
    only to use specific ones. Any help in this matter would be greatly
    Mitch O, Apr 18, 2005
    1. Advertisements

  2. Mitch O

    George Guest

    Hi Mitch,

    You did not specify whether you want all users to be able to log on to all
    25 machines or not... but anyway you failed to mention if it is a w2003
    domain ot not.

    In group policies in the computer configuration node, in windows settings,
    in security settings, in local policies and user right assignment you have
    "Allow log on locally". You can define this policy and all the users or
    groups that you want to be able to log on to that machine; apply the GPO to a
    container that holds all 25 computer accounts etc.

    Another thing you can do is: In Active Directory Users and Computers, in
    Account Tab->Log On To button - you can specify to which computers the user
    should be able to log on to. in 2003 you should be able to modify all 100
    users a a batch, but it all depends whether you want specific users accessing
    specific machines out of the 25 and whether you want those 100 users to be
    able to access any other machines on you network.

    Hope this helps.
    George, Apr 18, 2005
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.