Avatar of cdmt00
cdmt00
Flag for United States of America asked on

Restrict Logon to specified Computers

I am running Windows 2003 Terminal Server. I am looking to restrict OU's to only log onto specified computers. You can do this in Active Directory by Selecting LogonTo in the user properties. Is there a way to do this as a group policy?
Microsoft Server OSActive DirectoryWindows Server 2003

Avatar of undefined
Last Comment
cdmt00

8/22/2022 - Mon
Saineolai

Do you want to prevent certain users logging on to certain terminal servers?  If this is the case you can use the restricted groups group policy to control the membership of the Remote Desktop Users group on each terminal server.
cdmt00

ASKER
I want to create a group policy that allows all users in that OU to log on only to server1 and not server2. I know how to do this per user but not in group policy. I hope that clarify things.
SOLUTION
Saineolai

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
ryansoto

Your help has saved me hundreds of hours of internet surfing.
fblack61
cdmt00

ASKER
saineolai,

This can be set if you go to Active Directory Users and Computer, right click user  account, select properties go to Account tab, click "Log on to.." button and specify names of computers. I am looking to set this in group policy. your link told me how to allow remote desktop but not to specific servers.
ASKER CERTIFIED SOLUTION
Saineolai

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
cdmt00

ASKER
This seems like more hastle than just setting the permission on the user properties

Thanks for your help.