Windows Server

IT Boy · Guest

Hi,

Can some one tell me how to config in Windows XP pro so it will not allow
some users to login at that PC only?
e.g. an student could not login using an student ID on PC that is for
teacher account only.
Other information: Windows 2003 Domain AD with XP and NT clients.

Thank,

S.

Eric Denekamp · Guest

When these PC's are in an AD environment: this is easily done by putting
the PC's concerned in one OU, and creating the following GPO on that OU:
give the security group in which the teachers are (if you do not have one,
create one for this purpose) the right to logon locally on these computers
instead of averyone. (do not forget to add yourselves as domain admins.)
This will take care of this. If you explicitly want to deny the students,
you could g as far as that by giving the students group(s) the deny logon
locally right to those machines.

good luck,

Eric Denekamp
mailto:ericd@infosupport.com

Roger Abell [MVP] · Guest

On a domain joined machine you will notice that the Users group,
which is granted the right to log on locally to the machine, has as
members Domain Users, Authenticated Users, and Interactive.
You need to replace Domain Users with Teachers (or whatever)
and also you need to remove Authenticated Users. In order to
remove Authenticated Users you need to make sure that all of
the accounts that should be allowed to log in, and that usually
means all accounts defined on the machine itself, are members
of Users.

"IT Boy" <no_spam_ShingXX@hotmail.com> wrote in message
news:edMJeOkyFHA.2516@TK2MSFTNGP12.phx.gbl...

	Windows Server Forum Index -> Security	All times are GMT
Page 1 of 1