Solved

Using GPO to restrict a domain USERID to a specific set of machines

Posted on 2011-09-22
2
152 Views
Last Modified: 2012-06-11
Small school environment. At no time does a student login without domain credentials. But in lower grades, all the kids in Kindergarten share the same USERID, which is K1.  I want it so that USERID K1 can ONLY be used on the PC's in room K1, where a teacher is watching.  

My problem: Upper school students have unique USERIDs, but logon around the school as K1, to disguise their surfing behavior.

I need to make it so that K1 can only be used on the PC's in room K1, and K2 can only be used on the PC's in K2. I do NOT need to do the reverse, which would be to make the PC's in rooom K1 accept only K1 as a logon id.  

I'm not finding the GPO that would let me control this.  
0
Comment
Question by:bobzilla51
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 43

Accepted Solution

by:
Amit earned 250 total points
ID: 36582164
You can use Allow logon locally option in GPO.

http://support.microsoft.com/kb/247989

The user whom you want to login, add it to allow and for rest use deny option.
0
 

Author Comment

by:bobzilla51
ID: 36582229
If I'm reading this correctly, this doesn't do what I need.
I don't want anyone to logon locally. I need the Domain controller to assign permissions and shared resources, etc.
I just want K1 USERID restricted to a certain set of machines.
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question