asked on deny a user the rights to log on to certain PCs
In a Windows domain, we have a certain domain user that should be denied the right to log on to a specific PC (a domain member, of course). He should be allowed to work on all other domain members, however.
How do I configure that?
How do I configure that?
Active DirectoryWindows Server 2003
Last Comment
zolcer
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
make sure u give the custom group same permissions as the user group
ooops ignore last post
ASKER
Thanks a lot, worked beautifully.
On the PC...
Create a group called Blocked Logons
Add the user to the group
By default in local gpo computer cfg>Windows Settings>Security Set>Local Plcy>UserRightsAssesment>l
only gives logon rights to the following groups....
Admin, Backup Opr, Guest, Powerusr, Users (make sure the user is not part of these groups)