?
Solved

Limit workstation to a single user.

Posted on 2011-02-28
5
Medium Priority
?
735 Views
Last Modified: 2012-08-13
Good afternoon and thank you for taking the time out to address my question. Your time and expertise is greatly appreciated.

Rundown:
Server runs SBS 2008 Standard
Domain network w/ 16 wks.

I just finished setting up a new pc on the domain. I want to limit that wks to only one user. Where as no other user but one is able to logon.

I did find this setting in AD users & computers, but i would mean that i would have to add each pc manually for each user. A very mundane and time consuming process.
I'm almost certain that there has to be an easier way to accomplish this.




Capture01.JPG
0
Comment
Question by:loshdog
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 21

Expert Comment

by:snusgubben
ID: 34999466
By doing that you say: EHawileh can only log on to the computer named STAT01PC.
Every other domain user can log on to it.

It would be better to remove domain users from the local user group on the computer, and add EHawileh to the local user group.
0
 

Author Comment

by:loshdog
ID: 34999505
Hello and thank you for your input.

Just so that i understand this correctly.
New pc is STAT20PC. I want EHawileh to be the only user allowed to logon to this machine.
The best way to do this is from the workstation itself by removing the local users or domain users from the list and allow only EHawileh to connect?

I think i got this right???  :)
0
 
LVL 21

Accepted Solution

by:
snusgubben earned 2000 total points
ID: 34999556
That should do it. Remove the "domain\domain users" group from the local user group on the computer, and add EHawileh to the local user group.

(or local admin group if he should be a local admin on the computer)
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 34999576
* You can also use Restricted Groups, but I think that is overkill for this task...
0
 

Author Closing Comment

by:loshdog
ID: 34999733
I just implemented your solution and it worked like a charm.

Thank you very much.... :)
0

Featured Post

Bringing Advanced Authentication to the SMB Market

WatchGuard announces the acquisition of advanced authentication provider, Datablink, with one mission – to bring secure authentication to SMB, mid-market, and distributed enterprises with a cloud-based solution, ideal for resale via their established channel & MSSP community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Getting to know the threat landscape in which DDoS has evolved, and making the right choice to get ourselves geared up to defend against  DDoS attacks effectively. Get the necessary preparation works done and focus on Doing the First Things Right.
What's worse than having your data encrypted by ransomware? Getting attacked by a so-called "wiper," which simply destroys the data and offers you no hope of ever seeing it again.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question