Solved

Using GPO to restrict a domain USERID to a specific set of machines

Posted on 2011-09-22
2
149 Views
Last Modified: 2012-06-11
Small school environment. At no time does a student login without domain credentials. But in lower grades, all the kids in Kindergarten share the same USERID, which is K1.  I want it so that USERID K1 can ONLY be used on the PC's in room K1, where a teacher is watching.  

My problem: Upper school students have unique USERIDs, but logon around the school as K1, to disguise their surfing behavior.

I need to make it so that K1 can only be used on the PC's in room K1, and K2 can only be used on the PC's in K2. I do NOT need to do the reverse, which would be to make the PC's in rooom K1 accept only K1 as a logon id.  

I'm not finding the GPO that would let me control this.  
0
Comment
Question by:bobzilla51
2 Comments
 
LVL 43

Accepted Solution

by:
Amit earned 250 total points
ID: 36582164
You can use Allow logon locally option in GPO.

http://support.microsoft.com/kb/247989

The user whom you want to login, add it to allow and for rest use deny option.
0
 

Author Comment

by:bobzilla51
ID: 36582229
If I'm reading this correctly, this doesn't do what I need.
I don't want anyone to logon locally. I need the Domain controller to assign permissions and shared resources, etc.
I just want K1 USERID restricted to a certain set of machines.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question