Solved

How Can I Restrict Login to Workstations by Group?

Posted on 2007-11-28
2
1,125 Views
Last Modified: 2008-03-12
hi,

school environment, teacher and student use computers, win XP for workstations, win 2003 server for the AD setup, teacher and students in their own groups and OUs.

how can i use GPO to not allow students from logining into teacher workstations?

thanks.

-m
0
Comment
Question by:ysdadmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 5

Accepted Solution

by:
Radar07 earned 125 total points
ID: 20370396
Place all teacher computers into one OU then use GPO to "Deny log on locally" to the student security group under:
Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment

Apply this policy to the teacher computer OU and your problem shoudl be solved.
0
 
LVL 11

Expert Comment

by:bsharath
ID: 20371049
Restrict you mean accessing C$ shares or accessing them through console or remote desktop.iF we are talking about less machines then
For Remote access
 Right-click My computer>Properties>Remote>Select remote users. Delete any user group exist here add only users that you want
or
*Start>Settings>Control Panel>Windows Firewall.
                   *Enable firewall. Then click exceptions. Check the box of Remote Desktop. Double-clikc Remote Desktop, check the box of TCP 3389.
                  *Click Change Scope, then click custom list. Now type here the IP address whic is only allowed to connect to that PC. Apply and exit.

If they are less users then you can add the machine names to the users in Account > Log on to and the machine names.So that only machines that the user has the names will be able to access the computer.

Hope this helps...
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question