<div>
Sweeet. &nbsp;I knew that policy was there. &nbsp;But, I thought it was ONLY for local logon accounts and I wanted to restrict domain users. &nbsp;Thank you for the help.
</div>


<div>
<div class="content wysiwyg-content">
I want to be able to restrict who logs onto a PC. &nbsp;I know I can restrict a user's account so they can only log onto certain PCs. &nbsp;But, that's not what I want to do. &nbsp;I have a few PCs that only certain users should be able to log onto. &nbsp;I know I can to do it by deleting the 'NT Authority\Authenticated Users' and 'NT Authority\Interactive' members of the 'Users' group on the local PC, then, adding the AD users I want to be able to logon. &nbsp;But, I'd much rather do it with a group policy. &nbsp;Am I just missing the setting(s), or is it not possible with AD?
</div>
</div>


I want to be able to restrict who logs onto a PC.  I know I can restrict a user's account so they can only log onto certain PCs.  But, that's not what I want to do.  I have a few PCs that only certain users should be able to log onto.  I know I can to do it by deleting the 'NT Authority\Authenticated Users' and 'NT Authority\Interactive' members of the 'Users' group on the local PC, then, adding the AD users I want to be able to logon.  But, I'd much rather do it with a group policy.  Am I just missing the setting(s), or is it not possible with AD?

Sweeet.  I knew that policy was there.  But, I thought it was ONLY for local logon accounts and I wanted to restrict domain users.  Thank you for the help.

Is there a way to restrict who logs onto a specific PC by using Group Policy?

I want to be able to restrict who logs onto a PC.  I know I can restrict a user&#39;s account so they can only log onto certain PCs.  But, that&#39;s not what I want to do.  I have a few PCs that only certain users should be able to log onto.  I know I can to do it by deleting the &#39;NT Authority\Authenticated Users&#39; and &#39;NT Authority\Interactive&#39; members of the &#39;Users&#39; group on the local PC, then, adding the AD users I want to be able to logon.  But, I&#39;d much rather do it with a group policy.  Am I just missing the setting(s), or is it not possible with AD?

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.