Click here to get back home

stop some users login at a PC.

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
stop some users login at a PC. IT Boy 10-06-2005
Posted by IT Boy on October 6, 2005, 3:00 pm
Please log in for more thread options
Hi,

Can some one tell me how to config in Windows XP pro so it will not allow
some users to login at that PC only?
e.g. an student could not login using an student ID on PC that is for
teacher account only.
Other information: Windows 2003 Domain AD with XP and NT clients.

Thank,

S.




Posted by Eric Denekamp on October 6, 2005, 12:11 am
Please log in for more thread options
When these PC's are in an AD environment: this is easily done by putting
the PC's concerned in one OU, and creating the following GPO on that OU:
give the security group in which the teachers are (if you do not have one,
create one for this purpose) the right to logon locally on these computers
instead of averyone. (do not forget to add yourselves as domain admins.)
This will take care of this. If you explicitly want to deny the students,
you could g as far as that by giving the students group(s) the deny logon
locally right to those machines.


good luck,

Eric Denekamp
mailto:ericd@infosupport.com

> Hi,
>
> Can some one tell me how to config in Windows XP pro so it will not
> allow
> some users to login at that PC only?
> e.g. an student could not login using an student ID on PC that is for
> teacher account only.
> Other information: Windows 2003 Domain AD with XP and NT clients.
> Thank,
>
> S.
>




Posted by Roger Abell [MVP] on October 6, 2005, 2:19 am
Please log in for more thread options
On a domain joined machine you will notice that the Users group,
which is granted the right to log on locally to the machine, has as
members Domain Users, Authenticated Users, and Interactive.
You need to replace Domain Users with Teachers (or whatever)
and also you need to remove Authenticated Users. In order to
remove Authenticated Users you need to make sure that all of
the accounts that should be allowed to log in, and that usually
means all accounts defined on the machine itself, are members
of Users.

> Hi,
>
> Can some one tell me how to config in Windows XP pro so it will not allow
> some users to login at that PC only?
> e.g. an student could not login using an student ID on PC that is for
> teacher account only.
> Other information: Windows 2003 Domain AD with XP and NT clients.
>
> Thank,
>
> S.
>




Similar ThreadsPosted
how to stop login credentials being passed automatically? June 23, 2006, 11:37 am
Re: How to Stop a Service From Impersonating Other Users November 24, 2005, 3:01 pm
Re: How to Stop a Service From Impersonating Other Users November 25, 2005, 11:36 am
avoid users to login in other computers October 15, 2007, 10:33 am
Login Script Question - Failed Login Count, Location, and Method October 5, 2005, 6:28 pm
WAN stop respond June 1, 2006, 11:13 am
Stop Browsing for computers November 7, 2007, 6:14 am
STOP what you’re doing - It doesn’t work! LT69 July 28, 2006, 7:17 pm
allow start/stop a specific service through GPO November 14, 2006, 8:37 am
stop access from one ethernet adaptor July 10, 2007, 9:32 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap