rbudj
asked on
Allow only one domain user to login to workstation
I was asked this question, and to my knowledge the answer is no.
On a windows 7 computer connected to a server 2008 domain, is it possible to restrict access to this computer to one single user?
My guess is that anyone with a username in active directory can login but they want to know if regardless of permissions for different users, can logon to this computer be limited to a single user?
On a windows 7 computer connected to a server 2008 domain, is it possible to restrict access to this computer to one single user?
My guess is that anyone with a username in active directory can login but they want to know if regardless of permissions for different users, can logon to this computer be limited to a single user?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I didn't mention this but it goes without saying....leave at least one Administrator in the Admin Group if your not going to make the user an Admin We always leave Domain Admins in the Admin group as a backdoor regardless of how we restrict indivdual user access to the PC.
ASKER
Are you talking about the local policy?
I think so - the Domain Admins group should always be in the local Administrator group - but you can always just do one domain user or send out a group policy to add more groups to that group.
Here is a screenshot of the management screen showing exactly how my PC looks. Of course my personal acccounts are in the Admin Group. Some organizations put the users there and some only put them in the users or power users group.
Capture.JPG
Capture.JPG
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Im still working on this. Whoever is rushing, please be patient
ASKER
I am setting ths up in my test environment now. I will have more soon.
ASKER
Having some issues. Still working on this.
ASKER
Almost have my network rebuilt for testing. Sorry for the delay.
ASKER