LImiting who can sign on to a domain user pc

HI -
We are setting up a public pc in our breakroom to allow our "Shop" employees access to the intranet and internet like the office people have (yeah i know I didn't vote for this idea). I have Windows Steady State on the pc and i have locked it down with Group Policy. I also want to lock it so only one username can logon to the pc. How do I do this?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian PiercePhotographerCommented:
Why not set it up as a stand-alone PC (ie not a domain member) and create a single local user account. Users should still be able to access the internet/intranet and you can use local policies to lock doen the machine.
a_ro_noTechnical Account ManagerCommented:
I dont know if I am right on this, but consider using WMI filtering on Group Policies!
I assume you only want a generic user account logging in, such as "Shop user" or something, as opposed to a user's personal user account. In this case I would place the computer account in an OU called "Restricted Computers" or something like that. You can then create a GPO on that OU and use the settings "Deny log on locally" and "Allow logon locally" to set the group of users (or indeed one individual user account) who can log on to the machine. I suspect you will only need to set this in the Allow logon locally group, so try this first and, failing that, look at using Deny logon locally too.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
zuleaAuthor Commented:
Great answer. Exactly what I was looking for. Sometimes it is hard to remember where all the GPO settings are when you don't use it everyday.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.