GPO for Deny Logon Locally

I have multiple users that I want to deny logon capability completely, but I do not want to disable the account.  I have tried to use a GPO with no success.  I followed the following scenario.

Create a Security Group "Deny Logon".
Make user a member of the "Deny Logon" group.

Create a GPO called DenyLogon with the following properties set:
Computer Configuration
    Polices
        Windows Settings
            Security Settings
                Local Policies/User Rights Assignment
                    Deny log on as a batch job   setting = domain\Deny Logon
                    Deny log on as service         setting = domain\Deny Logon
                    Deny log on locally              setting = domain\Deny Logon
                    Deny log on through Terminal Services  settings = domain\Deny Logon
        Administrative Templates
            System/Group Policy
                Policy
                    Configure user Group Policy loopback processing mode    Enabled   - Replace

I linked the GPO to the domain.


Problem is user is still able to logon to computers.  What am I doing wrong?
gwc05aAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Pradeep DubeyConsultantCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.