Windows Server

Guest · Posted: Mon Feb 21, 2005 7:46 pm Post subject: Logon Access

Dear All

Is it possible to restrict logon access to workstations via a policy
applied to a global security group instead of applying it to each user
in AD?

SamC

Mark Gamache · Guest

You can place the computers in an OU and apply the policy to the OU.

Cheers,

--
Mark Gamache
Certified Security Solutions
http://www.css-security.com

<samc@hotmail.com> wrote in message
news:eg2VRvBGFHA.1924@TK2MSFTNGP14.phx.gbl...

Steven L Umbach · Guest

You can use security policy which is a computer configuration subset of
Group Policy. There are two user rights - logon locally and deny logon
locally which can be configured for a computer or a group of computers at
the local computer, domain, or Organizational Unit level. Keep in mind that
deny logon locally overrides any allow logon locally for a user or group.
You can find user rights in Group Policy computer configuration/Windows
settings/local policies/user rights. Group Policy can only be applied to
users and computers - not groups, though groups can be used to filter Group
Policy via the "apply" permission for the Group Policy. For instance if you
wanted to apply the same security policy for a group of computers, configure
an OU with it's own Group Policy configured with the settings you need to
restrict logon and then place those computer accounts into the OU. -- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;322176 --- how to
apply Group Policy

<samc@hotmail.com> wrote in message
news:eg2VRvBGFHA.1924@TK2MSFTNGP14.phx.gbl...

	Windows Server Forum Index -> Security	All times are GMT
Page 1 of 1