Is it possible to control who can login to a machine by using Group Policy?

I want to prevent certain users from logging into machines other than the ones they are supposed to log in to.  The number of machines the users are allowed to log into is large, the number of machines they are not supposed to use is smaller.  Can this be done through Group Policy?
CousinDupreeAsked:
Who is Participating?
 
tigermattConnect With a Mentor Commented:
There are a wealth of options for denying users and groups accessing machines in Computer Config, Windows Settings, Security Settings, User Rights Assignment. I usually recommend people use the Deny log on locally right and assign it in a GPO linked to the OU containing the PCs these users can't log on to. Of course use different GPOs for different PCs.

-tigermatt
0
 
tigermattCommented:
Thanks, CousinDupree!
Have a good day,
--tigermatt
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.