|
Posted by Roger Abell [MVP] on March 24, 2006, 7:43 pm
Please log in for more thread options
Logon rights are controlled in either Local Security Policy of each
machine or by subjecting those machines to GPO(s) from Active
Directory. The logon rights are in the Security Options section of
the Local Polcy. It is more effective to control Access over the
network, and Log on locally directly by listing the groups that
should be allowed, but one can also remove some of the allowed
by use of the Deny access over the network, and the Deny logon
locally user rights. Just do not forget to consider the nested groups
on the groups allowed (like Domain Users in Users) and do not
forget to allow Administrators.
> There are serveral users that we'd like to prevent from logging on to a
> group of
> servers. Is there any way in AD or with server security to do this? We
> have eithter Win2k or Win2003 servers.
>
> Thanks,
>
> Dan
>
>
| 
XML Sitemap