Solved

Deny login access to computers in an OU via Group Policy

Posted on 2014-03-31
3
1,698 Views
Last Modified: 2014-04-03
Since XP is coming to it's end of life I will like to stop users accessing any XP workstation using Group Policy. All my XP workstation reside in a separate Organisational Unit (OU).

Basically, I will like to stop users accessing these XP workstations in this OU or once a computer object  is moved into this OU. Please what is the best approach in achieving this via GPO?

Look forward to hearing from you soon.

Regards,

TA
0
Comment
Question by:adigu1t
3 Comments
 
LVL 6

Accepted Solution

by:
Hassan Besher earned 500 total points
ID: 39968453
Create an Group Policy for that OU. THIS group policy will have an entry under computer configuration, windows settings, security settings, local policies, user rights assignment for "Allow logon locally". (The local GPO for XP machines has a Deny Logon Locally setting, but not an Allow Logon Locally setting. Go figure.)
4. Configure this right, adding "Administrators" and the users you want to log on to this PC. ( P.S. Do NOT configure "Deny logon locally" for everyone!! Deny overrides allow!)
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39968884
hi,

apply "WMI" filter for xp os ............

select * from Win32_OperatingSystem where Version like "5.1%"



for more detail visit this site  
"http://technet.microsoft.com/en-us/library/cc947846%28WS.10%29.aspx"
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39973021
Simply remove the physical machines :)
Or remove them from active directory, works, too.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now