?
Solved

windows 2003 server active directory

Posted on 2008-10-22
3
Medium Priority
?
247 Views
Last Modified: 2010-03-17
is there a way through active directory group policy to only allow one user to login to a computer? I used group policy to due the opposite. I have a user that can only sign in to a specific computer. but I want to make it so nobody but one user can sign in to a specific computer.
0
Comment
Question by:JeffBeall
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 2

Accepted Solution

by:
calepantke earned 668 total points
ID: 22780030
You can restrict who logs into specific computers through Users and Groups on the specific machine. For example, you could set User A as the only user allowed to log into Computer B by having him be the only one in the local users group on Computer B. (that is excluding administrators).
0
 
LVL 4

Assisted Solution

by:futurefiles
futurefiles earned 668 total points
ID: 22780068
Go into the user's profile, Account, Log On To, and set the computer names the user should be able to login to.
Or use the Log on locally policy setting using local or domain GPO's.
0
 
LVL 18

Assisted Solution

by:Americom
Americom earned 664 total points
ID: 22782974
On your GPO under Computer Configuration>Windows Settings>Security Settings>Local Policies>User Rights Assignment>Allow log on locally

Here by default, only Gest, Administrators, Users, and Backup Operators granted the right to logon locally. You can remove all these four default user and groups and only grant the user you want to allow to logon. You may want to do the same for Allow log on Through Terminal Services in case someone try to logon remotely.

You just need to decide how you can logon if you ever forgot the password of that user's account. So a spare admin account would be safe.

Once the above GPO is configured you link it apply to the OU where the computer is in.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month14 days, 20 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question