Link to home
Create AccountLog in
Avatar of rbudj
rbudjFlag for United States of America

asked on

Allow only one domain user to login to workstation

I was asked this question, and to my knowledge the answer is no.

On a windows 7 computer connected to a server 2008 domain, is it possible to restrict access to this computer to one single user?

My guess is that anyone with a username in active directory can login but they want to know if regardless of permissions for different users, can logon to this computer be limited to a single user?
ASKER CERTIFIED SOLUTION
Avatar of amarpal0102
amarpal0102
Flag of New Zealand image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of rbudj

ASKER

Ok thanks for the info. I will test this and post back.
Avatar of Kenmcse1969
Kenmcse1969

I didn't mention this but it goes without saying....leave at least one Administrator in the Admin Group if your not going to make the user an Admin We always leave Domain Admins in the Admin group as a backdoor regardless of how we restrict indivdual user access to the PC.
Avatar of rbudj

ASKER

Are you talking about the local policy?
I think so - the Domain Admins group should always be in the local Administrator group - but you can always just do one domain user or send out a group policy to add more groups to that group.
Here is a screenshot of the management screen showing exactly how my PC looks. Of course my personal acccounts are in the Admin Group. Some organizations put the users there and some only put them in the users or power users group.


Capture.JPG
SOLUTION
Avatar of McKnife
McKnife
Flag of Germany image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of rbudj

ASKER

Im still working on this. Whoever is rushing, please be patient
Avatar of rbudj

ASKER

I am setting ths up in my test environment now. I will have more soon.
Avatar of rbudj

ASKER

Having some issues. Still working on this.
Avatar of rbudj

ASKER

Almost have my network rebuilt for testing. Sorry for the delay.