Link to home
Start Free TrialLog in
Avatar of mscit
mscitFlag for United States of America

asked on

Command Line for adding a machine to a user's 'Log On To' property in AD

Need to know what the command line syntax is for adding a computer name in the allowed computer log-on list under the 'Account' tab and then 'Log On To'. I have machines that I add to a particular domain that need to be added to 30 users and it's tedious adding them one at a time.
ASKER CERTIFIED SOLUTION
Avatar of tigermatt
tigermatt
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mscit

ASKER

That will work indeed. Here's the scenario. I have multiple small domains that have a two-way trust with a larger, 'main' domain. I want only certain users from the small domain to log onto workstations that belong to the main domain, but choosing the small domain from the domain list on that workstation. My question is, do I apply the GPO in the domain that the machines belong to (and authenticate the group the user accounts belong to in the small domain), or do I create computer accounts in the small domain and apply the GPO to it that way, using the cross-domain policy proliferation?
I would create the GPO in the main domain and then set up the GPO for users in the smaller domains. That is a lot easier.

-tigermatt