Computer Poilcy to restrict certain groups? 1

[SteveAudus]

Is it possible to set a GP on a OU, to restrict certain security groups from loging on?

Thanks for any suggestions?

http://www.chaucer.sheffield.sch.uk

 

[trusted]

While GPOs only apply to computer objects and user objects there are some settings that allow you to add(filter)groups. The GPO that would do what you want would the under Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights. The policy that you want is "Deny Logon Locally". Double click on it and add the desired group. To make the best use of this create an OU then move the computers (because the policy setting is under computer configuration it will only apply to computer objects) that you want to deny these users access to and then apply the GPO to that OU.

Hope that helps.

JC

 

[SteveAudus]

Spot on JC.

Worked a treat.

Cheers

http://www.chaucer.sheffield.sch.uk