Disable logon to this computer

Posted on 2009-12-30
Last Modified: 2012-08-13
Hey Guys,

Is there a way to disable logon to this computer option for all users. Except for admins?

Question by:Shivtek
    LVL 31

    Accepted Solution

    Just set the Log on Locally policy to only allow members of the Administrators group (or a group you have delegated) via GPO.

    LVL 1

    Author Comment

    That would mean the GPO on the OU of users?
    LVL 31

    Expert Comment

    No, the computer.  You want to apply the policy to the computer, not to the user.
    LVL 31

    Assisted Solution

    by:Henrik Johansson
    Configure the following policy in local policy on the computer or in a GPO linked to OU containing the computer objects that shall be affected.

    Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow log on locally

    You can also prevent some users by using 'Deny log on locally' user right. Be aware that deny always override allow if there's a conflict and the deny policy setting will act as an exclude rule of the allowed group of users.
    LVL 8

    Assisted Solution

    to get to the local GPO editor

    go to start-> run-> type "gpedit.msc" without quotes and press enter.  Follow previous comments for proper login allow/deny settings.
    LVL 17

    Assisted Solution

    by:Premkumar Yogeswaran
    In that local system,
    Start-> Run -> GPEDIT.MSC (enter)
    Now in Local Computer Policy.
    Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\ Log on locally
    In that remove the "USER" and add the user you want to log on locally...!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    Learn about cloud computing and its benefits for small business owners.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now