Link to home
Start Free TrialLog in
Avatar of potworny
potwornyFlag for Poland

asked on

How To Disable Local Accounts Using GPO?

Hi Experts :)

I would like to disable all  local accounts (except for local Administrators, maybe?) on all Domain Workstations. I want to use GPO in order to this. Does anyone know how it is accomplished?

Sincerely,
The Terrible Johnny
Avatar of smilerz
smilerz
Flag of United States of America image

You can't disable any local accounts, but you can use Restricted Groups or Account Rights to control whether those local accounts can login or not.

If you use Restricted Groups you can define all of the Built-In groups and they will over write whatever is configured locally.  Or you can set Account Rights to only allow the local admin and domain groups to login.

Its not quite the same, but it would disable the local users from being able to do anything.
Avatar of potworny

ASKER

> Or you can set Account Rights to only allow the local admin and domain groups to login.

How do I do that?
ASKER CERTIFIED SOLUTION
Avatar of smilerz
smilerz
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks a million, buddy :)
Happy New Year :)